last executing test programs: 1m22.131639092s ago: executing program 3 (id=3443): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x110, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xd4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffff801}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2f, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3f5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa46f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0xd47}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xda4229b7, 0xfffffc34}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x4}}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}]}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x663ddcb7, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x4b}}, @IFLA_VLAN_QOS_MAPPING={0x5, 0x1, {0xab5, 0x1000}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x26}]}, 0x110}}, 0x4000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003c80)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000d40)="26e7", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000f00)="98c187", 0x3}], 0x1, &(0x7f00000019c0)}}], 0x3, 0xc011) shutdown(r0, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x3f) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="10007d80", @ANYRES32=r4, @ANYRESDEC=r3], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r3, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000004c0)=0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x98, r7, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xef97}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) 1m22.067316578s ago: executing program 3 (id=3444): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x5, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2711, @my=0x1}, 0x33) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1m22.066821644s ago: executing program 3 (id=3446): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x22, 0x0}, 0x80000000}], 0x1c284f836fac35b, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f004, 0x2}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESOCT=r4, @ANYBLOB="0bcd99bfaf14a35255825a3563c738ac"], 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) splice(r9, 0x0, r10, &(0x7f00000002c0), 0x6, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r10, 0x111, 0x3, 0x2, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r9) 1m21.967285549s ago: executing program 3 (id=3447): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x724d}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r1}, 0x38) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = accept4$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e, 0x800) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0xb, {0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r9, 0x3, 0x7fff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="6a16e3c73b56c9a5b1a83868cabade2fb4106af1994ee711df715f908c8f883fc8d6ca6e8fea27fa1f521bfc8320feb3f203a7e0c7a8df897974e86d06ff159a6fa74360c1435e5479f00d77284a69624b5c979328ad34eff6aa96b5ce0d5e6f776492a92747cc33", 0x68}, {&(0x7f0000001740)="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", 0x1000}], 0x2, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r9}}}], 0xb8, 0x4800}, 0x4000094) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) setpgid(0x0, r10) 1m21.832635871s ago: executing program 3 (id=3448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x200, 0x4, 0x37c}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x10d, 0x5}, {0x10, 0x107, 0x6}], 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r2, 0x92, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x77) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r8, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019888fffc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1m21.597653551s ago: executing program 3 (id=3449): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) eventfd2(0x3, 0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045519, &(0x7f0000000480)=0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r2, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfe}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYBLOB="15d98d2fbb"], 0x3c}}, 0x10) 1m21.571571608s ago: executing program 32 (id=3449): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) eventfd2(0x3, 0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045519, &(0x7f0000000480)=0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r2, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfe}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYBLOB="15d98d2fbb"], 0x3c}}, 0x10) 4.640759902s ago: executing program 2 (id=4228): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000fedbdf65773cef0000000800", @ANYRES32=r2, @ANYBLOB="0c00990000000000020000000500ee000c000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200008c0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x9}, 'port0\x00', 0x511e36599023629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x4010, r5, 0x1bb2d000) r6 = syz_io_uring_setup(0x3480, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='2', @ANYRES8=r4], 0x118) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) listen(r3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x24, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600), 0x0) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) 4.406229835s ago: executing program 2 (id=4229): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r9, 0x4068aea3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtclass={0x4c, 0x28, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xe}, {0x8, 0xffe0}, {0x7, 0xffff}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400000fb}}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xa0, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000580)) r10 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r10}) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000300)=0x0) statx(r1, &(0x7f0000000500)='./file0/../file0\x00', 0x500, 0x1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) sendmsg$nl_netfilter(r10, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="9f7e94655e69b4527bb4e900ef0800d700", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="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"], 0x170c}, 0x1, 0x0, 0x0, 0x4040840}, 0x40830) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) 4.221834781s ago: executing program 2 (id=4230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002080102000000000000000000000000090001007379"], 0x20}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000300004802c0001800c000100636f756e746572001c0002800c000140000000003202a9bfb487d356000000050c000240000000000000c49c0900010073797a30000800000000020073797a32000000001400000011000100"/132], 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x5, 0x3, {{0x8, 0x4, 0x3, 0x22, 0x20, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @private=0xa010101, {[@cipso={0x86, 0xb, 0xffffffffffffffff, [{0x3, 0x5, "ba2978"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0}, &(0x7f0000000880)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'gretap0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x3, 0x30ac91be, {{0x21, 0x4, 0x1, 0x10, 0x84, 0x68, 0x0, 0x1e, 0x2f, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x4e, 0x1, [{0x1, 0xd, "8afa6f143a4cd84460a91b"}, {0x1, 0x12, "b66f6fa8701576220e7130806cec8e01"}, {0x1, 0x6, "dc3ba746"}, {0x1, 0x12, "1e9e0a74923f2396859f7056eb9a7426"}, {0x2, 0x11, "5b508db07bd41323cb4b7b91480000"}]}, @timestamp_prespec={0x44, 0x1c, 0xef, 0x3, 0x3, [{@private=0xa010100, 0x3}, {@loopback, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x970}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x80, 0xae1, 0x14, @mcast2, @remote, 0x7, 0x7, 0x5, 0x1000}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400000000fedbdf25000004003b", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280060002000100000008000500", @ANYRES32=r12, @ANYBLOB], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x8, 0x7, 0x2, 0xf57, {{0x6, 0x4, 0x0, 0x3c, 0x18, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, {[@ra={0x94, 0x4}]}}}}}) r14 = socket(0x2a, 0x2, 0x0) getsockname$packet(r14, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c00)={'batadv_slave_1\x00', 0x0}) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x2, 0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r19, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000c40)={'erspan0\x00', 0x0, 0x10, 0x8, 0x3, 0xf7e2, {{0x33, 0x4, 0x3, 0x6, 0xcc, 0x68, 0x0, 0x2, 0x29, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "2da3db83951c5b0f"}]}, @timestamp_addr={0x44, 0x24, 0x6b, 0x1, 0x0, [{@multicast1}, {@multicast2, 0x6fc}, {@rand_addr=0x64010101, 0x6f2}, {@remote, 0x3}]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x9, "4116a0a0edc2c0"}, {0x5, 0x11, "e34e4ce48b8be9860d751afed52869"}, {0x7, 0x8, "8b4e0a841106"}]}, @generic={0x0, 0xb, "5b21f82efa654115f9"}, @cipso={0x86, 0x33, 0x0, [{0x7, 0x6, "eee47c41"}, {0x0, 0xc, "d09414d929f1371856e8"}, {0x7, 0x6, "da66a42f"}, {0x7, 0x9, "309fdaac8dcd00"}, {0x5, 0xc, "f020d0c86d66348273d4"}]}, @ssrr={0x89, 0x1b, 0x25, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @loopback]}, @noop]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB='`\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f3f7000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="f80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r7, @ANYBLOB="b800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400b707000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="4402028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff0300000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="5c0202803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r20, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400c0000000"], 0x960}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 4.1054269s ago: executing program 2 (id=4231): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) r3 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000009c0), 0x101000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0x3d13, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060080350000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000500)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe11, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0xa, 0xa, 0xb, 0xffffffffffffffff, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff99}, 0x94) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102", @ANYRESDEC=r3, @ANYRES32=r3, @ANYRES64=r3], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x2d0, 0x2d0, 0x230, 0x138, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x7f00007f, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@multicast2, @multicast2, 0xff, 0x0, 'veth1_vlan\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x0, 0x1, 0xc1513f04b421a003}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0x0, 0x5c6cad92e6a38bac], 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x56, 0x9, 0xb, 0x3, 0x7ff1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0xff}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={r10, @in6={{0xa, 0x4e22, 0x2, @empty, 0xfffffffb}}, 0x0, 0x2083, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000001c0)=0x9c) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) 3.668357939s ago: executing program 1 (id=4235): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3.593988183s ago: executing program 0 (id=4238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000017c0)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x6000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0xffffffffffffff4a, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x1f00, @ioapic={0x4000, 0x800b, 0xe, 0xfffffffc, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x6, 0x4, '\x00', 0x9b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0x1, 0x10, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xd, 0x4a, '\x00', 0x9}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x0, '\x00', 0x8}, {0x0, 0x4, 0x1, '\x00', 0x3}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x44, 0x0, '\x00', 0xfd}, {0x6, 0x4, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x2, '\x00', 0x3}, {0x3, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x1, 0xfd, 0x7, '\x00', 0x2}, {0xac, 0x9, 0xfa, '\x00', 0x1}]}}) 3.454621852s ago: executing program 0 (id=4242): io_uring_setup(0xdac, &(0x7f0000000180)={0x0, 0x4491, 0x2, 0x800000}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100), &(0x7f0000000580)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="02153b609e0b0e00000000000000090e"], 0x10}}, 0x4001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r3, 0x0, 0x80000000) 3.283942211s ago: executing program 0 (id=4244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230501a8c9f389fef0cdf7ef04515e11b99692f650b752aa8e44c2bb0250e263a4450da5a686471b640d7aa2bd40f5aef1ad9940758cba453653ba29fad468f684522a73128dedb8a969792ac45f4737bc98d08e79ce54d875476af2f5bfb61bf3fab0c4ead534b874942bde45a313f7dc2ed1ae7b06169d4f27c244d877137211fcaf91220bcfa46c166f56e89dc444044a2e9cf96ae67659b2e41a59a0fd8a5eb0b557af5c81323fa0564fdd77e3aab680b89035435a6915bfcb60b30754f9f5929"], 0x38}}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400400, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@empty, @remote, 0x0}, &(0x7f0000000440)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000a40)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x209, 0x3, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x64, 0x0, 0x4, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2d}, {[@timestamp_addr={0x44, 0xc, 0x86, 0x1, 0xe, [{@local}]}, @end, @timestamp_prespec={0x44, 0xc, 0x9f, 0x3, 0x5, [{@multicast2, 0x8001}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="18020000", @ANYRES16=0x0, @ANYBLOB="01002bbd700005000000060000006000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000014000200626f6e64300000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d000000140002007866726d30000000000000000000000020000180080003000200000014000200776c616e310000000000000000000000640001801400020076657468315f746f5f687372000000001400020070696d3672656730000000000000000014000200766c616e300000000000000000000000140002007866726d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="5400018008000300000000000800030001000000140002006970766c616e30000000000000000000140002006970365f767469300000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRESHEX=r3, @ANYBLOB="6000018008000100", @ANYRES32=r3, @ANYBLOB="140002006361696630000000000000000000000008000100", @ANYRES32, @ANYBLOB="14000200767863616e31000000000000000000001400020062726964676530000000000000000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="4c0001800800030007000000140002007663616e300000000000000000000000080003000100000008000300020000001400020076657468305f746f5f68737200000000080003000700000014000180080003000300000008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000000"], 0x218}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) close(r5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xe47c6c047beb853a, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8001, 0x8, 0xd}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r12, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0x5, 0x100000000, 0xffffffffffffffff}) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f0000000300)={0x4, 0x40000}) ioctl$SG_BLKTRACETEARDOWN(r12, 0x1276, 0x66000300) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') write$P9_RSETATTR(r13, &(0x7f0000000200)={0x7, 0x1b, 0x1}, 0x7) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.102302022s ago: executing program 0 (id=4245): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.438878063s ago: executing program 2 (id=4246): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0xa0, 0x1, 0x62, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2, 0x8000, 0x7800, 0x3, 0xfff}}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', r2, 0x0, 0x9, 0xb, 0x0, 0x20, @local, @local, 0x47, 0x700, 0x3, 0xd6}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd28, 0x8}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x40804) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 2.375293345s ago: executing program 4 (id=4247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x90, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xffff}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x4800) 2.300347989s ago: executing program 2 (id=4248): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000300)={0x40, 0x16, 0x2, "ff03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x7, 0x56, {0x56, 0x2, "061c428c7aad91d44bdb975bf234e7d70159dd8e640b4eda1284b9a87ebddb740ca13b370b9cc87d32478d9a234472b20fb428ef1ac588453115d7f5439094e165420be64a4dec5a22b79506860c8964259e36e7"}}, &(0x7f00000003c0)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "1443587adeabc78b5316f0df1bd99a269a1a84f49974d9ee55ee9e588c01b3b4c3a828f2d2cdc2a63be4a7f4987ac4d6922c11295bd57162810ea422d5f6d09422694d3dc5b765d05e04df5947f921b201aee39c088eafee4b7bab9bf9f7cd037f3077c2469055fec4e5d8a15f1bb63ef60c485c99570c52a7c73894793fd5a117645b780572df30cc976ce7de571511339fc52767cc20a8dd7b2dc8"}}}, &(0x7f0000000700)={0x44, &(0x7f0000000180)={0x20, 0x17, 0x49, "1889950fca414478fd06a8f9ff2c42b791e7d01789cb962642b0dbdaee76637821cf0d4f252df8626b7561c73e9c70a40a3fcf78551f6bb5d30d61afb096f3d18d640f53bd29825853"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000480)={0x20, 0x81, 0x1, "8b"}, &(0x7f00000004c0)={0x20, 0x82, 0x1, "fd"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "f9"}, &(0x7f0000000640)={0x20, 0x84, 0x1, "0e"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "50be5c"}}) r2 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@filename='./file0/../file0/file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x88a8, r8, 0x1, 0x4, 0x6, @local}, 0x14) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x5b03, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r10) sendmsg$NL802154_CMD_GET_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r11, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r10, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x34}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 2.299410401s ago: executing program 4 (id=4256): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001ef0000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xfe0f000000000000) 1.292905153s ago: executing program 1 (id=4249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002080102000000000000000000000000090001007379"], 0x20}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000300004802c0001800c000100636f756e746572001c0002800c000140000000003202a9bfb487d356000000050c000240000000000000c49c0900010073797a30000800000000020073797a32000000001400000011000100"/132], 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x5, 0x3, {{0x8, 0x4, 0x3, 0x22, 0x20, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @private=0xa010101, {[@cipso={0x86, 0xb, 0xffffffffffffffff, [{0x3, 0x5, "ba2978"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0}, &(0x7f0000000880)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'gretap0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x3, 0x30ac91be, {{0x21, 0x4, 0x1, 0x10, 0x84, 0x68, 0x0, 0x1e, 0x2f, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x4e, 0x1, [{0x1, 0xd, "8afa6f143a4cd84460a91b"}, {0x1, 0x12, "b66f6fa8701576220e7130806cec8e01"}, {0x1, 0x6, "dc3ba746"}, {0x1, 0x12, "1e9e0a74923f2396859f7056eb9a7426"}, {0x2, 0x11, "5b508db07bd41323cb4b7b91480000"}]}, @timestamp_prespec={0x44, 0x1c, 0xef, 0x3, 0x3, [{@private=0xa010100, 0x3}, {@loopback, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x970}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x80, 0xae1, 0x14, @mcast2, @remote, 0x7, 0x7, 0x5, 0x1000}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400000000fedbdf25000004003b", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280060002000100000008000500", @ANYRES32=r12, @ANYBLOB], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x8, 0x7, 0x2, 0xf57, {{0x6, 0x4, 0x0, 0x3c, 0x18, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, {[@ra={0x94, 0x4}]}}}}}) r14 = socket(0x2a, 0x2, 0x0) getsockname$packet(r14, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c00)={'batadv_slave_1\x00', 0x0}) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x2, 0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r19, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000c40)={'erspan0\x00', 0x0, 0x10, 0x8, 0x3, 0xf7e2, {{0x33, 0x4, 0x3, 0x6, 0xcc, 0x68, 0x0, 0x2, 0x29, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "2da3db83951c5b0f"}]}, @timestamp_addr={0x44, 0x24, 0x6b, 0x1, 0x0, [{@multicast1}, {@multicast2, 0x6fc}, {@rand_addr=0x64010101, 0x6f2}, {@remote, 0x3}]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x9, "4116a0a0edc2c0"}, {0x5, 0x11, "e34e4ce48b8be9860d751afed52869"}, {0x7, 0x8, "8b4e0a841106"}]}, @generic={0x0, 0xb, "5b21f82efa654115f9"}, @cipso={0x86, 0x33, 0x0, [{0x7, 0x6, "eee47c41"}, {0x0, 0xc, "d09414d929f1371856e8"}, {0x7, 0x6, "da66a42f"}, {0x7, 0x9, "309fdaac8dcd00"}, {0x5, 0xc, "f020d0c86d66348273d4"}]}, @ssrr={0x89, 0x1b, 0x25, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @loopback]}, @noop]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB='`\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f3f7000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="f80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r7, @ANYBLOB="b800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400b707000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="4402028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff0300000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="5c0202803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r20, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400c0000000"], 0x960}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 1.292560476s ago: executing program 4 (id=4250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_setlink={0x2c, 0x13, 0x20, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1040, 0x20000}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) 1.231015093s ago: executing program 4 (id=4251): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080007003b070000050006"], 0x4c}}, 0x884) fsync(r0) 1.22006593s ago: executing program 1 (id=4252): io_uring_setup(0xdac, &(0x7f0000000180)={0x0, 0x4491, 0x2, 0x800000}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100), &(0x7f0000000580)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="02153b609e0b0e00000000000000090e"], 0x10}}, 0x4001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r3, 0x0, 0x80000000) 1.060384274s ago: executing program 1 (id=4253): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x29229, 0x45cd6}}, 0x20}}, 0x0) 921.314599ms ago: executing program 0 (id=4254): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) setresuid(0x0, 0xee00, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r0, &(0x7f0000000280)="6d4ecae5c1b17615c132467becd03896f284571c037614a4ccc8d2a5f8aacfae959b142835bc5e4ee2faa15ceba00ccf1e2b42ac8648e0817a81c1677bee0bc6b8bb6ad36d79c612ef0640d2bfc0e30c997d106ed54d38b27ccddac12a15a01b9aeb6aca352c0f6f3a88e93a2f", 0x6d) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161301, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async, rerun: 64) fsopen(&(0x7f0000000000)='ntfs3\x00', 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x2, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) socket(0x10, 0x3, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) (rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x1e) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000002c0)}) (async, rerun: 32) setfsuid(0x0) chroot(&(0x7f00000001c0)='./file0/../file0\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1f, 0x4, 0x200) 921.136305ms ago: executing program 1 (id=4255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="00fe0290000038c54b6c9a09dd5ad3241e8ad2e6ff401ad12bed07030000000049", @ANYRES32=r3, @ANYBLOB="1400030076657468315f746f5f7465616d000000"], 0x2c}}, 0x4008880) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x8000, {0x0, 0x0, 0x0, r10, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x101}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0xf3e, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000240)='attr\x00') getdents64(r13, &(0x7f00000001c0)=""/65, 0x41) getdents(r13, &(0x7f0000000a00)=""/168, 0xef) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x3c, 0x0, 0x0, 0x200}, {0x6, 0x8, 0x6}]}) 920.894735ms ago: executing program 0 (id=4257): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x3) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78421b}, 0x40c0080) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_disconnect(0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x3}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffff000, &(0x7f0000000000)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 1.80506ms ago: executing program 4 (id=4258): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000740)=0x7ccc64fa, 0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) 1.336058ms ago: executing program 1 (id=4259): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000140), 0x4) r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r5 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r5, 0x0) r6 = getpgid(r5) setpgid(0x0, r6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffff64}]) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x2b) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) fsmount(r8, 0x0, 0x70) 0s ago: executing program 4 (id=4266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7fc, &(0x7f0000000140)=0x0) r2 = inotify_init() io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000014d564b"]) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4040004) kernel console output (not intermixed with test programs): e descriptor's value: 18 [ 259.684739][ T6018] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.687565][ T6018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 259.690166][ T6018] usb 9-1: SerialNumber: syz [ 259.694493][ T6018] hub 9-1:1.0: bad descriptor, ignoring hub [ 259.696395][ T6018] hub 9-1:1.0: probe with driver hub failed with error -5 [ 259.699174][ T6018] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 260.243911][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 261.269938][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 261.355129][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 262.240266][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 262.240278][ T40] audit: type=1400 audit(1754275394.959:5041): avc: denied { read write } for pid=16144 comm="syz.1.3693" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 262.249526][ T40] audit: type=1400 audit(1754275394.959:5042): avc: denied { open } for pid=16144 comm="syz.1.3693" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 262.256877][ T40] audit: type=1400 audit(1754275394.959:5043): avc: denied { create } for pid=16143 comm="syz.4.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.263781][ T40] audit: type=1400 audit(1754275394.959:5044): avc: denied { read write } for pid=16144 comm="syz.1.3693" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 262.271236][ T40] audit: type=1400 audit(1754275394.959:5045): avc: denied { open } for pid=16144 comm="syz.1.3693" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 262.279296][ T40] audit: type=1400 audit(1754275394.968:5046): avc: denied { map_create } for pid=16144 comm="syz.1.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 262.285597][ T40] audit: type=1400 audit(1754275394.968:5047): avc: denied { write } for pid=16143 comm="syz.4.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.292065][ T40] audit: type=1400 audit(1754275394.968:5048): avc: denied { ioctl } for pid=16144 comm="syz.1.3693" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 262.300244][ T40] audit: type=1400 audit(1754275394.968:5049): avc: denied { accept } for pid=16144 comm="syz.1.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 262.306708][ T40] audit: type=1400 audit(1754275394.968:5050): avc: denied { write } for pid=16143 comm="syz.4.3692" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.339936][ T840] usb 9-1: USB disconnect, device number 8 [ 262.366335][ T5972] Bluetooth: hci3: sending frame failed (-49) [ 262.368508][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 262.384696][T16156] FAULT_INJECTION: forcing a failure. [ 262.384696][T16156] name failslab, interval 1, probability 0, space 0, times 0 [ 262.389429][T16156] CPU: 0 UID: 0 PID: 16156 Comm: syz.1.3697 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 262.389445][T16156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.389451][T16156] Call Trace: [ 262.389456][T16156] [ 262.389461][T16156] dump_stack_lvl+0x16c/0x1f0 [ 262.389481][T16156] should_fail_ex+0x512/0x640 [ 262.389503][T16156] ? fs_reclaim_acquire+0xae/0x150 [ 262.389519][T16156] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 262.389534][T16156] should_failslab+0xc2/0x120 [ 262.389547][T16156] __kmalloc_noprof+0xd2/0x510 [ 262.389562][T16156] tomoyo_realpath_from_path+0xc2/0x6e0 [ 262.389578][T16156] ? tomoyo_profile+0x47/0x60 [ 262.389596][T16156] tomoyo_path_number_perm+0x245/0x580 [ 262.389607][T16156] ? tomoyo_path_number_perm+0x237/0x580 [ 262.389620][T16156] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 262.389633][T16156] ? find_held_lock+0x2b/0x80 [ 262.389660][T16156] ? find_held_lock+0x2b/0x80 [ 262.389672][T16156] ? hook_file_ioctl_common+0x145/0x410 [ 262.389692][T16156] ? __fget_files+0x20e/0x3c0 [ 262.389707][T16156] security_file_ioctl+0x9b/0x240 [ 262.389722][T16156] __x64_sys_ioctl+0xb7/0x210 [ 262.389741][T16156] do_syscall_64+0xcd/0x4c0 [ 262.389758][T16156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.389770][T16156] RIP: 0033:0x7fb0c258eb69 [ 262.389779][T16156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.389790][T16156] RSP: 002b:00007fb0c34e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.389800][T16156] RAX: ffffffffffffffda RBX: 00007fb0c27b5fa0 RCX: 00007fb0c258eb69 [ 262.389807][T16156] RDX: 0000200000000380 RSI: 000000004008ae89 RDI: 0000000000000005 [ 262.389814][T16156] RBP: 00007fb0c34e3090 R08: 0000000000000000 R09: 0000000000000000 [ 262.389821][T16156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.389827][T16156] R13: 0000000000000000 R14: 00007fb0c27b5fa0 R15: 00007ffe482e69f8 [ 262.389841][T16156] [ 262.389846][T16156] ERROR: Out of memory at tomoyo_realpath_from_path. [ 262.466441][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 262.473382][T16159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3695'. [ 262.620188][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3710'. [ 262.633629][T16185] batman_adv: batadv0: Removing interface: dummy0 [ 262.742285][ T5972] Bluetooth: hci3: sending frame failed (-49) [ 262.745304][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 262.847192][T16198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3714'. [ 263.101053][T16230] program syz.0.3726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.120675][T16230] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.123077][T16230] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.125333][T16230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.399690][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3733'. [ 263.403291][T16245] netlink: 'syz.0.3733': attribute type 7 has an invalid length. [ 263.405762][T16245] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3733'. [ 263.434836][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3736'. [ 263.437676][T16257] tipc: Cannot configure node identity twice [ 263.439977][T16257] tipc: Cannot configure node identity twice [ 263.507918][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3735'. [ 263.563608][T16270] fuse: Bad value for 'group_id' [ 263.565203][T16270] fuse: Bad value for 'group_id' [ 263.577610][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 263.701226][T16273] tipc: Enabled bearer , priority 0 [ 263.703755][T16273] syzkaller0: entered promiscuous mode [ 263.705554][T16273] syzkaller0: entered allmulticast mode [ 263.715663][T16273] tipc: Resetting bearer [ 263.720826][T16272] tipc: Resetting bearer [ 263.726881][T16272] tipc: Disabling bearer [ 264.197310][ T6018] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 264.304149][ T1340] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 264.366627][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.370114][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.373129][ T6018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.377156][ T6018] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.380917][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.384678][ T6018] usb 6-1: config 0 descriptor?? [ 264.464453][ T1340] usb 5-1: Using ep0 maxpacket: 16 [ 264.467446][ T1340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.470870][ T1340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.473938][ T1340] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.478072][ T1340] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 264.480947][ T1340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.485041][ T1340] usb 5-1: config 0 descriptor?? [ 264.617782][T16294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=16294 comm=syz.2.3751 [ 264.617793][T16295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=16295 comm=syz.2.3751 [ 264.665912][T16294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3751'. [ 264.699645][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 264.920268][ T1340] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 264.922625][ T1340] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 264.925079][ T1340] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 264.927394][ T1340] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 264.929743][ T1340] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 264.932042][ T1340] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 264.934383][ T1340] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 264.936765][ T1340] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 264.939069][ T1340] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 264.941425][ T1340] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 264.943735][ T1340] microsoft 0003:045E:07DA.0009: item fetching failed at offset 31/34 [ 264.945541][ T839] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 264.946692][ T1340] microsoft 0003:045E:07DA.0009: parse failed [ 264.950664][ T1340] microsoft 0003:045E:07DA.0009: probe with driver microsoft failed with error -22 [ 265.105553][ T839] usb 7-1: Using ep0 maxpacket: 8 [ 265.108797][ T839] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 265.111496][ T839] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.114475][ T839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.117749][ T839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.120775][ T839] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.124725][ T839] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 265.127651][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.140943][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3746'. [ 265.144114][T16283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3746'. [ 265.170522][ T840] usb 5-1: USB disconnect, device number 34 [ 265.346901][ T839] usb 7-1: usb_control_msg returned -32 [ 265.348728][ T839] usbtmc 7-1:16.0: can't read capabilities [ 265.543730][ T5972] Bluetooth: hci3: command 0x1003 tx timeout [ 265.543750][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 265.727580][T16307] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 265.800062][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 265.871688][T16315] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.911577][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 267.151620][ T6018] usbhid 6-1:0.0: can't add hid device: -71 [ 267.153663][ T6018] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 267.158449][ T6018] usb 6-1: USB disconnect, device number 36 [ 267.771721][ T40] kauditd_printk_skb: 117 callbacks suppressed [ 267.771734][ T40] audit: type=1400 audit(1754275400.134:5168): avc: denied { sys_module } for pid=16358 comm="syz.4.3773" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 267.909989][ T6018] usb 7-1: USB disconnect, device number 22 [ 268.022599][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 268.102063][T16369] tipc: Enabling of bearer rejected, already enabled [ 268.251010][T16375] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 268.364513][ T5972] Bluetooth: hci3: command 0x1003 tx timeout [ 268.364549][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 268.409908][T16382] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 268.412101][ T40] audit: type=1400 audit(1754275400.733:5169): avc: denied { mounton } for pid=16381 comm="syz.1.3779" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 268.416424][T16382] VFS: Can't find a romfs filesystem on dev nullb0. [ 268.416424][T16382] [ 268.436455][ T40] audit: type=1400 audit(1754275400.761:5170): avc: denied { bind } for pid=16385 comm="syz.0.3781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.443185][ T40] audit: type=1400 audit(1754275400.761:5171): avc: denied { setopt } for pid=16385 comm="syz.0.3781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.530370][ T40] audit: type=1400 audit(1754275400.845:5172): avc: denied { read write } for pid=16390 comm="syz.0.3782" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.537597][ T40] audit: type=1400 audit(1754275400.845:5173): avc: denied { open } for pid=16390 comm="syz.0.3782" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.544711][ T40] audit: type=1400 audit(1754275400.845:5174): avc: denied { map } for pid=16390 comm="syz.0.3782" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.551952][ T40] audit: type=1400 audit(1754275400.845:5175): avc: denied { execute } for pid=16390 comm="syz.0.3782" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.579134][T16393] tipc: Enabled bearer , priority 0 [ 268.581521][T16393] syzkaller0: entered promiscuous mode [ 268.583240][T16393] syzkaller0: entered allmulticast mode [ 268.593163][T16393] tipc: Resetting bearer [ 268.595878][T16392] tipc: Resetting bearer [ 268.604301][T16392] tipc: Disabling bearer [ 268.755514][ T40] audit: type=1400 audit(1754275401.061:5176): avc: denied { read } for pid=16400 comm="syz.1.3786" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 268.763053][ T40] audit: type=1400 audit(1754275401.061:5177): avc: denied { open } for pid=16400 comm="syz.1.3786" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 268.794409][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.796479][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.850551][T16409] __nla_validate_parse: 5 callbacks suppressed [ 268.850561][T16409] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3787'. [ 268.857671][T16409] binder: 16402:16409 ioctl 0 200000000140 returned -22 [ 268.941109][ T5972] Bluetooth: hci3: sending frame failed (-49) [ 268.945460][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 269.116136][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3792'. [ 269.133740][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 269.136273][T16431] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.400908][ T61] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 269.415415][T16441] netlink: 'syz.0.3802': attribute type 10 has an invalid length. [ 269.571880][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 269.574882][ T61] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.577441][ T61] usb 6-1: config 0 has no interface number 0 [ 269.579366][ T61] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.583060][ T61] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.585909][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.589935][ T61] usb 6-1: config 0 descriptor?? [ 269.594018][ T61] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 269.808887][T16434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.811678][T16434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.835646][ T5972] Bluetooth: hci3: sending frame failed (-49) [ 269.838545][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 269.927064][ T840] usb 6-1: USB disconnect, device number 37 [ 269.946976][T16451] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3805'. [ 270.180900][ T6031] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 270.212932][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 270.244968][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 270.356964][ T6031] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.359910][ T6031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.362588][ T6031] usb 7-1: Product: syz [ 270.363929][ T6031] usb 7-1: Manufacturer: syz [ 270.365419][ T6031] usb 7-1: SerialNumber: syz [ 270.370670][ T6031] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 270.373177][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 270.376174][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 270.379702][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 270.382993][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 270.386899][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 270.390336][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 270.395462][ T6031] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.395534][ T10] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 270.401083][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.403547][ T10] usb 9-1: Product: syz [ 270.404897][ T10] usb 9-1: Manufacturer: syz [ 270.407114][ T10] usb 9-1: SerialNumber: syz [ 270.409774][ T10] usb 9-1: config 0 descriptor?? [ 270.412442][T16451] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 270.416894][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input39 [ 270.421054][ T5366] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 270.425156][ T5366] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 270.429244][ T5366] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 270.432769][ T5366] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 270.564492][T16459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3808'. [ 270.567677][T16459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3808'. [ 270.602811][T16461] netlink: 'syz.0.3809': attribute type 7 has an invalid length. [ 270.609315][T16461] : entered promiscuous mode [ 270.612516][T16449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.616165][T16449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.642576][ T10] usb 9-1: USB disconnect, device number 9 [ 270.647337][ T54] usb 7-1: USB disconnect, device number 23 [ 271.208223][T16467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.287852][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3812'. [ 271.356264][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 271.540353][ T6031] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 271.543702][ T6031] ath9k_htc: Failed to initialize the device [ 271.546876][ T54] usb 7-1: ath9k_htc: USB layer deinitialized [ 271.653857][T16490] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 271.933184][ T6018] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 272.105952][ T6018] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.109349][ T6018] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 272.112400][ T6018] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.115381][ T6018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.119799][T16492] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 272.123504][ T6018] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.338764][ T840] usb 9-1: USB disconnect, device number 10 [ 272.360582][ T54] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 272.467452][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.531997][ T54] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.535421][ T54] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 272.538440][ T54] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.541234][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.545487][T16509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 272.549255][ T54] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.631177][T16520] cgroup: fork rejected by pids controller in /syz1 [ 272.763486][T16509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.766429][T16509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.833149][ T6018] usb 7-1: USB disconnect, device number 24 [ 273.047686][T16509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3826'. [ 273.051531][T16509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3826'. [ 273.133284][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 273.133295][ T40] audit: type=1400 audit(1754275405.160:5301): avc: denied { append } for pid=16591 comm="syz.4.3834" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 273.154052][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3834'. [ 273.156856][T16592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3834'. [ 273.160839][ T40] audit: type=1400 audit(1754275405.179:5302): avc: denied { create } for pid=16591 comm="syz.4.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 273.170088][ T40] audit: type=1326 audit(1754275405.188:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16591 comm="syz.4.3834" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14b378eb69 code=0x0 [ 273.288216][ T40] audit: type=1400 audit(1754275405.300:5304): avc: denied { read } for pid=16591 comm="syz.4.3834" name="vsock" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.297826][ T40] audit: type=1400 audit(1754275405.300:5305): avc: denied { open } for pid=16591 comm="syz.4.3834" path="/dev/vsock" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.313647][ T40] audit: type=1400 audit(1754275405.328:5306): avc: denied { read write } for pid=16606 comm="syz.1.3836" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 273.322497][ T40] audit: type=1400 audit(1754275405.328:5307): avc: denied { open } for pid=16606 comm="syz.1.3836" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 273.334308][ T40] audit: type=1400 audit(1754275405.347:5308): avc: denied { read } for pid=16606 comm="syz.1.3836" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 273.341445][ T40] audit: type=1400 audit(1754275405.347:5309): avc: denied { open } for pid=16606 comm="syz.1.3836" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 273.349315][ T40] audit: type=1400 audit(1754275405.347:5310): avc: denied { ioctl } for pid=16606 comm="syz.1.3836" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 273.580645][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 273.610720][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 273.785238][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 273.788231][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.790775][ T10] usb 6-1: Product: syz [ 273.792156][ T10] usb 6-1: Manufacturer: syz [ 273.794096][ T10] usb 6-1: SerialNumber: syz [ 273.799601][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 273.816021][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 274.252277][T16607] UHID_CREATE from different security context by process 1075 (syz.1.3836), this is not allowed. [ 274.257511][ T840] usb 6-1: USB disconnect, device number 38 [ 274.496817][T16642] __nla_validate_parse: 1 callbacks suppressed [ 274.496863][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3846'. [ 274.689956][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 275.127974][ T10] usb 6-1: Service connection timeout for: 256 [ 275.129953][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 275.132797][ T10] ath9k_htc: Failed to initialize the device [ 275.134865][ T840] usb 6-1: ath9k_htc: USB layer deinitialized [ 275.213578][T16666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3854'. [ 275.216644][T16666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3854'. [ 275.219624][T16666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3854'. [ 275.222610][T16666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3854'. [ 275.225634][T16666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3854'. [ 275.228567][T16666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3854'. [ 275.231494][T16666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3854'. [ 275.234622][T16666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3854'. [ 275.238985][T16666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3854'. [ 275.303994][T16672] ip6gretap1: entered promiscuous mode [ 275.305789][T16672] ip6gretap1: entered allmulticast mode [ 275.538404][T16688] netlink: 'syz.2.3871': attribute type 32 has an invalid length. [ 275.594333][T16703] /dev/sr0: Can't open blockdev [ 275.813486][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 275.934064][T16725] tap0: tun_chr_ioctl cmd 1074025675 [ 275.935837][T16725] tap0: persist enabled [ 275.937402][T16725] tap0: tun_chr_ioctl cmd 1074025678 [ 275.939058][T16725] tap0: group set to 0 [ 276.154565][T16735] tap0: tun_chr_ioctl cmd 1074025675 [ 276.157674][T16735] tap0: persist enabled [ 276.160249][T16735] tap0: tun_chr_ioctl cmd 1074025675 [ 276.163360][T16735] tap0: persist disabled [ 276.686496][T16761] i2c i2c-1: Invalid block write size 34 [ 276.740955][T16764] fuse: Unknown parameter 'f`' [ 276.792342][T16767] syzkaller1: entered promiscuous mode [ 276.794121][T16767] syzkaller1: entered allmulticast mode [ 276.854406][T16767] SELinux: Context Ü is not valid (left unmapped). [ 276.923017][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 278.034356][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 278.178540][T16812] tmpfs: Bad value for 'mpol' [ 278.178897][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 278.330326][ T5973] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 278.331357][T16820] netlink: 'syz.2.3903': attribute type 2 has an invalid length. [ 278.914247][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 278.914258][ T40] audit: type=1400 audit(1754275410.569:5434): avc: denied { create } for pid=16838 comm="syz.2.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 279.063861][T16846] netlink: 'syz.0.3914': attribute type 2 has an invalid length. [ 279.128242][ T40] audit: type=1400 audit(1754275410.766:5435): avc: denied { bind } for pid=16852 comm="syz.2.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.134867][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 279.223015][ T5972] Bluetooth: hci3: sending frame failed (-49) [ 279.225610][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 279.246805][T16861] tap0: tun_chr_ioctl cmd 1074025675 [ 279.248593][T16861] tap0: persist disabled [ 279.338929][T16863] FAULT_INJECTION: forcing a failure. [ 279.338929][T16863] name failslab, interval 1, probability 0, space 0, times 0 [ 279.343839][T16863] CPU: 3 UID: 0 PID: 16863 Comm: syz.0.3921 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 279.343855][T16863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.343862][T16863] Call Trace: [ 279.343866][T16863] [ 279.343871][T16863] dump_stack_lvl+0x16c/0x1f0 [ 279.343909][T16863] should_fail_ex+0x512/0x640 [ 279.343931][T16863] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 279.343945][T16863] should_failslab+0xc2/0x120 [ 279.343957][T16863] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 279.343968][T16863] ? rcu_is_watching+0x12/0xc0 [ 279.343982][T16863] ? get_random_u64+0x57c/0x7d0 [ 279.343995][T16863] ? prepare_creds+0x2c/0x7d0 [ 279.344008][T16863] prepare_creds+0x2c/0x7d0 [ 279.344021][T16863] copy_creds+0xa7/0xa50 [ 279.344034][T16863] copy_process+0xff6/0x7690 [ 279.344055][T16863] ? __pfx_copy_process+0x10/0x10 [ 279.344087][T16863] ? ptep_set_access_flags+0x103/0x160 [ 279.344107][T16863] ? find_held_lock+0x2b/0x80 [ 279.344120][T16863] ? find_held_lock+0x2b/0x80 [ 279.344133][T16863] ? __handle_mm_fault+0x13b8/0x2a50 [ 279.344154][T16863] kernel_clone+0xfc/0x930 [ 279.344170][T16863] ? __pfx_kernel_clone+0x10/0x10 [ 279.344189][T16863] ? __pfx_css_rstat_updated+0x10/0x10 [ 279.344208][T16863] __do_sys_clone+0xce/0x120 [ 279.344223][T16863] ? __pfx___do_sys_clone+0x10/0x10 [ 279.344238][T16863] ? handle_mm_fault+0x2ab/0xd10 [ 279.344261][T16863] ? do_user_addr_fault+0x843/0x1370 [ 279.344276][T16863] do_syscall_64+0xcd/0x4c0 [ 279.344294][T16863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.344305][T16863] RIP: 0033:0x7f0a41d8eb69 [ 279.344315][T16863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.344326][T16863] RSP: 002b:00007f0a42b96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 279.344337][T16863] RAX: ffffffffffffffda RBX: 00007f0a41fb5fa0 RCX: 00007f0a41d8eb69 [ 279.344349][T16863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.344355][T16863] RBP: 00007f0a42b97090 R08: 0000000000000000 R09: 0000000000000000 [ 279.344362][T16863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.344368][T16863] R13: 0000000000000000 R14: 00007f0a41fb5fa0 R15: 00007ffdea36be48 [ 279.344382][T16863] [ 279.356628][ T40] audit: type=1400 audit(1754275410.981:5436): avc: denied { create } for pid=16864 comm="syz.2.3922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.430368][ T40] audit: type=1400 audit(1754275410.990:5437): avc: denied { write } for pid=16864 comm="syz.2.3922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.440437][ T40] audit: type=1400 audit(1754275410.990:5438): avc: denied { nlmsg_write } for pid=16864 comm="syz.2.3922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.449916][ T40] audit: type=1400 audit(1754275410.990:5439): avc: denied { read } for pid=16864 comm="syz.2.3922" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 279.458533][ T40] audit: type=1400 audit(1754275410.990:5440): avc: denied { open } for pid=16864 comm="syz.2.3922" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 279.465833][ T40] audit: type=1400 audit(1754275410.990:5441): avc: denied { create } for pid=16864 comm="syz.2.3922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 279.472218][ T40] audit: type=1400 audit(1754275410.990:5442): avc: denied { ioctl } for pid=16864 comm="syz.2.3922" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 279.479516][T16886] netlink: 'syz.0.3928': attribute type 1 has an invalid length. [ 279.480443][ T40] audit: type=1400 audit(1754275410.990:5443): avc: denied { write } for pid=16864 comm="syz.2.3922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 279.482579][T16886] NCSI netlink: No device for ifindex 0 [ 279.607039][ T5972] Bluetooth: hci3: sending frame failed (-49) [ 279.609567][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 279.763899][T16911] input: syz0 as /devices/virtual/input/input41 [ 280.246034][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 280.256881][ T6018] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 280.390182][T16926] program syz.2.3945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.408944][T16922] __nla_validate_parse: 84 callbacks suppressed [ 280.408956][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3944'. [ 280.449176][ T6018] usb 6-1: Using ep0 maxpacket: 16 [ 280.452974][ T6018] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 280.456162][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.459544][ T6018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.461911][T16933] comedi comedi2: comedi_config --init_data is deprecated [ 280.462674][T16930] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3946'. [ 280.465860][ T6018] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 280.474366][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.477940][ T6018] usb 6-1: config 0 descriptor?? [ 280.485257][ T6018] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input42 [ 280.510569][T16935] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3948'. [ 280.566936][ T5972] Bluetooth: hci3: sending frame failed (-49) [ 280.569476][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 280.648747][T16947] overlayfs: conflicting options: userxattr,metacopy=on [ 280.737268][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3954'. [ 280.855575][ T6031] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 280.886908][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'. [ 281.015351][ T6031] usb 7-1: Using ep0 maxpacket: 8 [ 281.018334][ T6031] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.020919][ T6031] usb 7-1: config 0 has no interface number 0 [ 281.022909][ T6031] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.026391][ T6031] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 281.029172][ T6031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.032872][ T6031] usb 7-1: config 0 descriptor?? [ 281.036763][ T6031] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 281.250184][T16945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.253238][T16945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.257716][ T839] usb 7-1: USB disconnect, device number 25 [ 281.357259][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 282.057133][ T5972] Bluetooth: hci3: sending frame failed (-49) [ 282.060386][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 282.207194][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3965'. [ 282.359414][T16994] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3969'. [ 282.447273][ T839] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 282.468572][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 282.471114][T17000] FAULT_INJECTION: forcing a failure. [ 282.471114][T17000] name failslab, interval 1, probability 0, space 0, times 0 [ 282.475066][T17000] CPU: 3 UID: 0 PID: 17000 Comm: syz.0.3971 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 282.475081][T17000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.475088][T17000] Call Trace: [ 282.475092][T17000] [ 282.475097][T17000] dump_stack_lvl+0x16c/0x1f0 [ 282.475117][T17000] should_fail_ex+0x512/0x640 [ 282.475135][T17000] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 282.475149][T17000] should_failslab+0xc2/0x120 [ 282.475175][T17000] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 282.475187][T17000] ? security_file_alloc+0x34/0x2b0 [ 282.475205][T17000] security_file_alloc+0x34/0x2b0 [ 282.475219][T17000] init_file+0x93/0x4c0 [ 282.475235][T17000] alloc_empty_file_noaccount+0x3d/0xd0 [ 282.475255][T17000] alloc_file_pseudo_noaccount+0x13a/0x230 [ 282.475272][T17000] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 282.475294][T17000] bdev_file_open_by_dev+0x143/0x210 [ 282.475311][T17000] swsusp_check+0x72/0x440 [ 282.475327][T17000] software_resume+0x6f/0x4e0 [ 282.475340][T17000] resume_store+0x247/0x460 [ 282.475352][T17000] ? __pfx_resume_store+0x10/0x10 [ 282.475369][T17000] ? find_held_lock+0x2b/0x80 [ 282.475385][T17000] ? __pfx_resume_store+0x10/0x10 [ 282.475397][T17000] kobj_attr_store+0x55/0x80 [ 282.475414][T17000] ? __pfx_kobj_attr_store+0x10/0x10 [ 282.475431][T17000] sysfs_kf_write+0xf2/0x150 [ 282.475445][T17000] kernfs_fop_write_iter+0x354/0x510 [ 282.475456][T17000] ? __pfx_sysfs_kf_write+0x10/0x10 [ 282.475470][T17000] vfs_write+0x6c4/0x1150 [ 282.475482][T17000] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 282.475494][T17000] ? __pfx___mutex_lock+0x10/0x10 [ 282.475517][T17000] ? __pfx_vfs_write+0x10/0x10 [ 282.475538][T17000] ksys_write+0x12a/0x250 [ 282.475549][T17000] ? __pfx_ksys_write+0x10/0x10 [ 282.475560][T17000] ? fput+0x9b/0xd0 [ 282.475577][T17000] do_syscall_64+0xcd/0x4c0 [ 282.475595][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.475606][T17000] RIP: 0033:0x7f0a41d8eb69 [ 282.475616][T17000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.475627][T17000] RSP: 002b:00007f0a42b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.475638][T17000] RAX: ffffffffffffffda RBX: 00007f0a41fb5fa0 RCX: 00007f0a41d8eb69 [ 282.475646][T17000] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 282.475652][T17000] RBP: 00007f0a42b97090 R08: 0000000000000000 R09: 0000000000000000 [ 282.475658][T17000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.475665][T17000] R13: 0000000000000000 R14: 00007f0a41fb5fa0 R15: 00007ffdea36be48 [ 282.475679][T17000] [ 282.618246][ T839] usb 7-1: Using ep0 maxpacket: 16 [ 282.621243][ T839] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 282.623730][ T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.627038][ T839] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.631935][ T839] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 282.634786][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.638331][ T839] usb 7-1: config 0 descriptor?? [ 282.642638][ T839] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input43 [ 282.810466][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 282.857714][T16985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.860528][T16985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.865832][ T10] usb 7-1: USB disconnect, device number 26 [ 283.144296][ T6031] usb 6-1: USB disconnect, device number 39 [ 283.472239][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3977'. [ 283.475422][T17019] IPVS: Error joining to the multicast group [ 283.541287][T17033] FAULT_INJECTION: forcing a failure. [ 283.541287][T17033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.545424][T17033] CPU: 2 UID: 0 PID: 17033 Comm: syz.0.3983 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 283.545440][T17033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 283.545447][T17033] Call Trace: [ 283.545451][T17033] [ 283.545456][T17033] dump_stack_lvl+0x16c/0x1f0 [ 283.545475][T17033] should_fail_ex+0x512/0x640 [ 283.545496][T17033] _copy_from_user+0x2e/0xd0 [ 283.545508][T17033] input_event_from_user+0x133/0x3b0 [ 283.545524][T17033] ? __pfx_input_event_from_user+0x10/0x10 [ 283.545538][T17033] ? __pfx___might_resched+0x10/0x10 [ 283.545552][T17033] ? input_inject_event+0x1c0/0x3b0 [ 283.545566][T17033] evdev_write+0x37b/0x750 [ 283.545582][T17033] ? __pfx_evdev_write+0x10/0x10 [ 283.545595][T17033] ? bpf_lsm_file_permission+0x9/0x10 [ 283.545610][T17033] ? security_file_permission+0x71/0x210 [ 283.545626][T17033] ? rw_verify_area+0xcf/0x6c0 [ 283.545645][T17033] ? __pfx_evdev_write+0x10/0x10 [ 283.545657][T17033] vfs_write+0x29d/0x1150 [ 283.545670][T17033] ? __pfx_vfs_write+0x10/0x10 [ 283.545680][T17033] ? find_held_lock+0x2b/0x80 [ 283.545694][T17033] ? __fget_files+0x204/0x3c0 [ 283.545708][T17033] ? __fget_files+0x20e/0x3c0 [ 283.545724][T17033] ksys_write+0x1f8/0x250 [ 283.545735][T17033] ? __pfx_ksys_write+0x10/0x10 [ 283.545750][T17033] do_syscall_64+0xcd/0x4c0 [ 283.545768][T17033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.545779][T17033] RIP: 0033:0x7f0a41d8eb69 [ 283.545789][T17033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.545800][T17033] RSP: 002b:00007f0a42b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.545811][T17033] RAX: ffffffffffffffda RBX: 00007f0a41fb5fa0 RCX: 00007f0a41d8eb69 [ 283.545818][T17033] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 283.545824][T17033] RBP: 00007f0a42b97090 R08: 0000000000000000 R09: 0000000000000000 [ 283.545831][T17033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 283.545837][T17033] R13: 0000000000000000 R14: 00007f0a41fb5fa0 R15: 00007ffdea36be48 [ 283.545851][T17033] [ 283.553659][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3975'. [ 283.579749][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 283.725550][T17052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3988'. [ 283.826636][T17054] hsr_slave_0 (unregistering): left promiscuous mode [ 283.969662][T17062] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20 [ 283.972250][T17064] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20 [ 283.977161][T17063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.188872][ T840] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 284.327712][ T840] usb 7-1: device descriptor read/64, error -71 [ 284.342036][ T40] kauditd_printk_skb: 163 callbacks suppressed [ 284.342052][ T40] audit: type=1400 audit(1754275415.648:5607): avc: denied { create } for pid=17083 comm="syz.0.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 284.353449][ T40] audit: type=1400 audit(1754275415.648:5608): avc: denied { bind } for pid=17083 comm="syz.0.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 284.362330][ T40] audit: type=1400 audit(1754275415.648:5609): avc: denied { setopt } for pid=17083 comm="syz.0.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 284.370491][ T40] audit: type=1400 audit(1754275415.648:5610): avc: denied { accept } for pid=17083 comm="syz.0.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 284.378400][ T40] audit: type=1400 audit(1754275415.648:5611): avc: denied { read } for pid=17083 comm="syz.0.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 284.468837][ T40] audit: type=1400 audit(1754275415.770:5612): avc: denied { create } for pid=17087 comm="syz.0.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.469447][T17089] netlink: 'syz.0.4002': attribute type 21 has an invalid length. [ 284.474750][ T40] audit: type=1400 audit(1754275415.770:5613): avc: denied { ioctl } for pid=17087 comm="syz.0.4002" path="socket:[80166]" dev="sockfs" ino=80166 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.489156][ T216] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.489160][T17089] netlink: 'syz.0.4002': attribute type 21 has an invalid length. [ 284.489182][ T216] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.496792][ T216] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.499565][ T216] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.529460][ T40] audit: type=1400 audit(1754275415.816:5614): avc: denied { create } for pid=17092 comm="syz.0.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 284.536607][ T40] audit: type=1400 audit(1754275415.816:5615): avc: denied { bind } for pid=17092 comm="syz.0.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 284.544100][ T40] audit: type=1400 audit(1754275415.816:5616): avc: denied { name_bind } for pid=17092 comm="syz.0.4003" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 284.605740][ T840] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 284.691186][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.755464][ T840] usb 7-1: device descriptor read/64, error -71 [ 284.873687][ T840] usb usb7-port1: attempt power cycle [ 285.154326][T17107] tmpfs: Bad value for 'mpol' [ 285.247116][ T840] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 285.270865][ T840] usb 7-1: device descriptor read/8, error -71 [ 285.275781][T17115] tipc: Cannot configure node identity twice [ 285.535147][T17121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.535738][ T840] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 285.558353][ T840] usb 7-1: device descriptor read/8, error -71 [ 285.675077][ T840] usb usb7-port1: unable to enumerate USB device [ 285.718181][ T63] Bluetooth: hci3: command 0x1003 tx timeout [ 285.719596][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 285.767588][T17132] __nla_validate_parse: 7 callbacks suppressed [ 285.767598][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4016'. [ 285.813963][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 285.844516][ T216] failed while handling packet from 1:16385 [ 285.844540][ T216] failed while handling packet from 1:16385 [ 285.846572][ T216] failed while handling packet from 1:16385 [ 285.850738][ T216] failed while handling packet from 1:16385 [ 285.853621][ T216] failed while handling packet from 1:16385 [ 285.856508][ T216] failed while handling packet from 1:16385 [ 285.861535][ T216] failed while handling packet from 1:16385 [ 285.863448][ T216] failed while handling packet from 1:16385 [ 285.868754][ T216] failed while handling packet from 1:16385 [ 285.871827][ T216] failed while handling packet from 1:16385 [ 285.875749][ T216] failed while handling packet from 1:16385 [ 285.879904][ T216] failed while handling packet from 1:16385 [ 285.881853][ T216] failed while handling packet from 1:16385 [ 285.883790][ T216] failed while handling packet from 1:16385 [ 285.885728][ T216] failed while handling packet from 1:16385 [ 285.887641][ T216] failed while handling packet from 1:16385 [ 285.891694][ T216] failed while handling packet from 1:16385 [ 285.893859][ T216] failed while handling packet from 1:16385 [ 285.895787][ T216] failed while handling packet from 1:16385 [ 285.897728][ T216] failed while handling packet from 1:16385 [ 285.900108][ T216] failed while handling packet from 1:16385 [ 285.901989][ T216] failed while handling packet from 1:16385 [ 285.903872][ T216] failed while handling packet from 1:16385 [ 285.905761][ T216] failed while handling packet from 1:16385 [ 285.907595][ T216] failed while handling packet from 1:16385 [ 285.909478][ T216] failed while handling packet from 1:16385 [ 285.912178][ T216] failed while handling packet from 1:16385 [ 285.914188][ T216] failed while handling packet from 1:16385 [ 285.916137][ T216] failed while handling packet from 1:16385 [ 285.918057][ T216] failed while handling packet from 1:16385 [ 285.919982][ T216] failed while handling packet from 1:16385 [ 285.923135][ T216] failed while handling packet from 1:16385 [ 285.925154][ T216] failed while handling packet from 1:16385 [ 285.927357][ T216] failed while handling packet from 1:16385 [ 285.929290][ T216] failed while handling packet from 1:16385 [ 285.931201][ T216] failed while handling packet from 1:16385 [ 285.933055][ T216] failed while handling packet from 1:16385 [ 285.934968][ T216] failed while handling packet from 1:16385 [ 285.936826][ T216] failed while handling packet from 1:16385 [ 285.938680][ T216] failed while handling packet from 1:16385 [ 285.940538][ T216] failed while handling packet from 1:16385 [ 285.942575][ T216] failed while handling packet from 1:16385 [ 285.944442][ T216] failed while handling packet from 1:16385 [ 285.946350][ T216] failed while handling packet from 1:16385 [ 285.948208][ T216] failed while handling packet from 1:16385 [ 285.950070][ T216] failed while handling packet from 1:16385 [ 285.951927][ T216] failed while handling packet from 1:16385 [ 285.954129][ T216] failed while handling packet from 1:16385 [ 285.955990][ T216] failed while handling packet from 1:16385 [ 285.957909][ T216] failed while handling packet from 1:16385 [ 285.959763][ T216] failed while handling packet from 1:16385 [ 285.961623][ T216] failed while handling packet from 1:16385 [ 285.963796][ T216] failed while handling packet from 1:16385 [ 285.965665][ T216] failed while handling packet from 1:16385 [ 285.967510][ T216] failed while handling packet from 1:16385 [ 285.969465][ T216] failed while handling packet from 1:16385 [ 285.969766][T17143] loop6: detected capacity change from 0 to 524288000 [ 285.971342][ T216] failed while handling packet from 1:16385 [ 285.971361][ T216] failed while handling packet from 1:16385 [ 285.971378][ T216] failed while handling packet from 1:16385 [ 285.973825][T17143] buffer_io_error: 6 callbacks suppressed [ 285.973834][T17143] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.976500][ T216] failed while handling packet from 1:16385 [ 285.977561][T17143] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.979322][ T216] failed while handling packet from 1:16385 [ 285.979341][ T216] failed while handling packet from 1:16385 [ 285.979360][ T216] failed while handling packet from 1:16385 [ 285.979377][ T216] failed while handling packet from 1:16385 [ 285.981373][T17143] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.983364][ T216] failed while handling packet from 1:16385 [ 285.985737][T17143] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.987815][ T216] failed while handling packet from 1:16385 [ 285.987833][ T216] failed while handling packet from 1:16385 [ 285.987850][ T216] failed while handling packet from 1:16385 [ 285.987867][ T216] failed while handling packet from 1:16385 [ 285.987884][ T216] failed while handling packet from 1:16385 [ 285.987901][ T216] failed while handling packet from 1:16385 [ 285.987918][ T216] failed while handling packet from 1:16385 [ 285.987934][ T216] failed while handling packet from 1:16385 [ 285.987951][ T216] failed while handling packet from 1:16385 [ 285.987967][ T216] failed while handling packet from 1:16385 [ 285.987985][ T216] failed while handling packet from 1:16385 [ 285.988002][ T216] failed while handling packet from 1:16385 [ 285.988037][ T216] failed while handling packet from 1:16385 [ 285.988055][ T216] failed while handling packet from 1:16385 [ 285.988072][ T216] failed while handling packet from 1:16385 [ 285.988089][ T216] failed while handling packet from 1:16385 [ 285.988106][ T216] failed while handling packet from 1:16385 [ 285.988122][ T216] failed while handling packet from 1:16385 [ 285.988139][ T216] failed while handling packet from 1:16385 [ 285.988156][ T216] failed while handling packet from 1:16385 [ 285.988172][ T216] failed while handling packet from 1:16385 [ 285.988190][ T216] failed while handling packet from 1:16385 [ 285.988206][ T216] failed while handling packet from 1:16385 [ 285.988231][ T216] failed while handling packet from 1:16385 [ 285.988248][ T216] failed while handling packet from 1:16385 [ 285.988264][ T216] failed while handling packet from 1:16385 [ 285.988281][ T216] failed while handling packet from 1:16385 [ 285.988298][ T216] failed while handling packet from 1:16385 [ 285.988314][ T216] failed while handling packet from 1:16385 [ 285.988331][ T216] failed while handling packet from 1:16385 [ 285.988347][ T216] failed while handling packet from 1:16385 [ 285.988364][ T216] failed while handling packet from 1:16385 [ 285.988381][ T216] failed while handling packet from 1:16385 [ 285.988397][ T216] failed while handling packet from 1:16385 [ 285.988414][ T216] failed while handling packet from 1:16385 [ 285.988432][ T216] failed while handling packet from 1:16385 [ 285.988449][ T216] failed while handling packet from 1:16385 [ 285.988465][ T216] failed while handling packet from 1:16385 [ 285.988482][ T216] failed while handling packet from 1:16385 [ 285.988498][ T216] failed while handling packet from 1:16385 [ 285.988515][ T216] failed while handling packet from 1:16385 [ 285.988532][ T216] failed while handling packet from 1:16385 [ 285.993851][T17143] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.993903][T17143] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.997721][ T216] failed while handling packet from 1:16385 [ 285.999544][T17143] Buffer I/O error on dev loop6, logical block 0, async page read [ 286.001352][ T216] failed while handling packet from 1:16385 [ 286.003800][T17143] Buffer I/O error on dev loop6, logical block 0, async page read [ 286.005647][ T216] failed while handling packet from 1:16385 [ 286.005666][ T216] failed while handling packet from 1:16385 [ 286.008945][T17143] ldm_validate_partition_table(): Disk read failed. [ 286.015631][ T216] failed while handling packet from 1:16385 [ 286.015652][ T216] failed while handling packet from 1:16385 [ 286.017865][T17143] Buffer I/O error on dev loop6, logical block 0, async page read [ 286.019472][ T216] failed while handling packet from 1:16385 [ 286.020579][ T216] failed while handling packet from 1:16385 [ 286.022023][T17143] Buffer I/O error on dev loop6, logical block 0, async page read [ 286.023714][ T216] failed while handling packet from 1:16385 [ 286.026273][T17143] Dev loop6: unable to read RDB block 0 [ 286.028071][ T216] failed while handling packet from 1:16385 [ 286.122499][ T216] failed while handling packet from 1:16385 [ 286.124639][ T216] failed while handling packet from 1:16385 [ 286.126513][ T216] failed while handling packet from 1:16385 [ 286.128412][ T216] failed while handling packet from 1:16385 [ 286.130258][ T216] failed while handling packet from 1:16385 [ 286.132110][ T216] failed while handling packet from 1:16385 [ 286.133982][ T216] failed while handling packet from 1:16385 [ 286.136142][ T216] failed while handling packet from 1:16385 [ 286.137980][ T216] failed while handling packet from 1:16385 [ 286.139811][ T216] failed while handling packet from 1:16385 [ 286.141666][ T216] failed while handling packet from 1:16385 [ 286.143502][ T216] failed while handling packet from 1:16385 [ 286.145621][ T216] failed while handling packet from 1:16385 [ 286.147109][T17146] loop6: detected capacity change from 524288000 to 0 [ 286.147475][ T216] failed while handling packet from 1:16385 [ 286.147702][ T5973] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.149329][T17143] loop6: unable to read partition table [ 286.149415][T17143] loop6: partition table beyond EOD, [ 286.151410][ T216] failed while handling packet from 1:16385 [ 286.151429][ T216] failed while handling packet from 1:16385 [ 286.151446][ T216] failed while handling packet from 1:16385 [ 286.153698][T17143] truncated [ 286.155211][ T216] failed while handling packet from 1:16385 [ 286.157088][T17143] loop_reread_partitions: partition scan of loop6 (™^L‹ ¦øíA;åó§Èb»ö@’†Ö”:B‚w¾<ØÈgønf. -Ó‘†³.ài ëí>^.¾dDd—Â) failed (rc=-5) [ 286.158705][ T216] failed while handling packet from 1:16385 [ 286.164524][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4022'. [ 286.165395][ T216] failed while handling packet from 1:16385 [ 286.176676][ T216] failed while handling packet from 1:16385 [ 286.178594][ T216] failed while handling packet from 1:16385 [ 286.180451][ T216] failed while handling packet from 1:16385 [ 286.182284][ T216] failed while handling packet from 1:16385 [ 286.184147][ T216] failed while handling packet from 1:16385 [ 286.186010][ T216] failed while handling packet from 1:16385 [ 286.188211][ T216] failed while handling packet from 1:16385 [ 286.190085][ T216] failed while handling packet from 1:16385 [ 286.191957][ T216] failed while handling packet from 1:16385 [ 286.193852][ T216] failed while handling packet from 1:16385 [ 286.195692][ T216] failed while handling packet from 1:16385 [ 286.197551][ T216] failed while handling packet from 1:16385 [ 286.199673][ T216] failed while handling packet from 1:16385 [ 286.201569][ T216] failed while handling packet from 1:16385 [ 286.203429][ T216] failed while handling packet from 1:16385 [ 286.205304][ T216] failed while handling packet from 1:16385 [ 286.207165][ T216] failed while handling packet from 1:16385 [ 286.209077][ T216] failed while handling packet from 1:16385 [ 286.211986][ T216] failed while handling packet from 1:16385 [ 286.213865][ T216] failed while handling packet from 1:16385 [ 286.215719][ T216] failed while handling packet from 1:16385 [ 286.217575][ T216] failed while handling packet from 1:16385 [ 286.219468][ T216] failed while handling packet from 1:16385 [ 286.221559][ T216] failed while handling packet from 1:16385 [ 286.223427][ T216] failed while handling packet from 1:16385 [ 286.225302][ T216] failed while handling packet from 1:16385 [ 286.227157][ T216] failed while handling packet from 1:16385 [ 286.229021][ T216] failed while handling packet from 1:16385 [ 286.231292][ T216] failed while handling packet from 1:16385 [ 286.233443][ T216] failed while handling packet from 1:16385 [ 286.235297][ T216] failed while handling packet from 1:16385 [ 286.237155][ T216] failed while handling packet from 1:16385 [ 286.239123][ T216] failed while handling packet from 1:16385 [ 286.241018][ T216] failed while handling packet from 1:16385 [ 286.242938][ T216] failed while handling packet from 1:16385 [ 286.244819][ T216] failed while handling packet from 1:16385 [ 286.246670][ T216] failed while handling packet from 1:16385 [ 286.248535][ T216] failed while handling packet from 1:16385 [ 286.250404][ T216] failed while handling packet from 1:16385 [ 286.252609][ T216] failed while handling packet from 1:16385 [ 286.254897][ T216] failed while handling packet from 1:16385 [ 286.256770][ T216] failed while handling packet from 1:16385 [ 286.258625][ T216] failed while handling packet from 1:16385 [ 286.260491][ T216] failed while handling packet from 1:16385 [ 286.262388][ T216] failed while handling packet from 1:16385 [ 286.264389][ T216] failed while handling packet from 1:16385 [ 286.266244][ T216] failed while handling packet from 1:16385 [ 286.268112][ T216] failed while handling packet from 1:16385 [ 286.270003][ T216] failed while handling packet from 1:16385 [ 286.271858][ T216] failed while handling packet from 1:16385 [ 286.273864][ T216] failed while handling packet from 1:16385 [ 286.275778][ T216] failed while handling packet from 1:16385 [ 286.277640][ T216] failed while handling packet from 1:16385 [ 286.279498][ T216] failed while handling packet from 1:16385 [ 286.281372][ T216] failed while handling packet from 1:16385 [ 286.283224][ T216] failed while handling packet from 1:16385 [ 286.285183][ T216] failed while handling packet from 1:16385 [ 286.287037][ T216] failed while handling packet from 1:16385 [ 286.288898][ T216] failed while handling packet from 1:16385 [ 286.290769][ T216] failed while handling packet from 1:16385 [ 286.292632][ T216] failed while handling packet from 1:16385 [ 286.294522][ T216] failed while handling packet from 1:16385 [ 286.296438][ T216] failed while handling packet from 1:16385 [ 286.298295][ T216] failed while handling packet from 1:16385 [ 286.300163][ T216] failed while handling packet from 1:16385 [ 286.302030][ T216] failed while handling packet from 1:16385 [ 286.303885][ T216] failed while handling packet from 1:16385 [ 286.305823][ T216] failed while handling packet from 1:16385 [ 286.308314][ T216] failed while handling packet from 1:16385 [ 286.310467][ T216] failed while handling packet from 1:16385 [ 286.312765][ T216] failed while handling packet from 1:16385 [ 286.314626][ T216] failed while handling packet from 1:16385 [ 286.316630][ T216] failed while handling packet from 1:16385 [ 286.318549][ T216] failed while handling packet from 1:16385 [ 286.320422][ T216] failed while handling packet from 1:16385 [ 286.322276][ T216] failed while handling packet from 1:16385 [ 286.324155][ T216] failed while handling packet from 1:16385 [ 286.326152][ T216] failed while handling packet from 1:16385 [ 286.328144][ T216] failed while handling packet from 1:16385 [ 286.330022][ T216] failed while handling packet from 1:16385 [ 286.331873][ T216] failed while handling packet from 1:16385 [ 286.333732][ T216] failed while handling packet from 1:16385 [ 286.335587][ T216] failed while handling packet from 1:16385 [ 286.337563][ T216] failed while handling packet from 1:16385 [ 286.339453][ T216] failed while handling packet from 1:16385 [ 286.341313][ T216] failed while handling packet from 1:16385 [ 286.343163][ T216] failed while handling packet from 1:16385 [ 286.345037][ T216] failed while handling packet from 1:16385 [ 286.346887][ T216] failed while handling packet from 1:16385 [ 286.348833][ T216] failed while handling packet from 1:16385 [ 286.350699][ T216] failed while handling packet from 1:16385 [ 286.352559][ T216] failed while handling packet from 1:16385 [ 286.354414][ T216] failed while handling packet from 1:16385 [ 286.356273][ T216] failed while handling packet from 1:16385 [ 286.358166][ T216] failed while handling packet from 1:16385 [ 286.360416][ T216] failed while handling packet from 1:16385 [ 286.573397][ T5973] Bluetooth: hci3: sending frame failed (-49) [ 286.578279][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 286.690373][ T6031] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 286.850947][ T6031] usb 9-1: Using ep0 maxpacket: 16 [ 286.853990][ T6031] usb 9-1: config index 0 descriptor too short (expected 65, got 36) [ 286.856615][ T6031] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.859994][ T6031] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.864093][ T6031] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 286.866860][ T6031] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.871749][T17164] No control pipe specified [ 286.872182][ T6031] usb 9-1: config 0 descriptor?? [ 286.877098][ T6031] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input44 [ 286.914773][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 286.934743][T17164] openvswitch: netlink: IPv4 tun info is not correct [ 287.092930][ T6031] usb 9-1: USB disconnect, device number 11 [ 287.157333][T17185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.245014][ T5973] Bluetooth: hci3: sending frame failed (-49) [ 287.251175][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 287.266147][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4037'. [ 287.841436][T17211] netlink: 'syz.4.4045': attribute type 2 has an invalid length. [ 287.843973][T17211] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4045'. [ 287.847020][T17211] nbd: must specify a device to reconfigure [ 288.028115][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 288.084404][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4048'. [ 288.088833][ T1340] IPVS: starting estimator thread 0... [ 288.094718][T17219] tipc: Enabled bearer , priority 10 [ 288.177675][T17220] IPVS: using max 46 ests per chain, 110400 per kthread [ 288.269932][T17227] kvm: kvm [17226]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x87 [ 288.273033][T17227] kvm: kvm [17226]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x87 [ 288.286749][T17232] bridge_slave_0: left promiscuous mode [ 288.288671][T17232] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.288972][T17227] kvm: kvm [17226]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x87 [ 288.296742][T17232] bridge_slave_1: left allmulticast mode [ 288.298526][T17232] bridge_slave_1: left promiscuous mode [ 288.300365][T17232] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.304928][T17232] bond0: (slave bond_slave_0): Releasing backup interface [ 288.308759][T17232] bond0: (slave bond_slave_1): Releasing backup interface [ 288.312323][T17232] team0: Port device team_slave_0 removed [ 288.312437][T17227] kvm: kvm [17226]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x87 [ 288.317552][T17227] kvm: kvm [17226]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x87 [ 288.317756][T17232] team0: Port device team_slave_1 removed [ 288.322673][T17232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.325456][T17232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.332515][T17227] kvm_intel: kvm [17226]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x87 [ 288.359423][T17235] netlink: 'syz.1.4054': attribute type 55 has an invalid length. [ 288.381877][T17237] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 288.497267][T17243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4056'. [ 289.138467][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 289.322259][T17247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.551779][T17261] program syz.0.4061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.164795][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 290.244114][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'. [ 290.248196][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 290.248205][ T40] audit: type=1400 audit(1754275421.167:5740): avc: denied { create } for pid=17270 comm="syz.2.4066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 290.249048][T17271] cgroup: noprefix used incorrectly [ 290.252135][ T40] audit: type=1400 audit(1754275421.167:5741): avc: denied { mounton } for pid=17270 comm="syz.2.4066" path="/500" dev="tmpfs" ino=2586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 290.258368][T17271] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.258491][ T40] audit: type=1400 audit(1754275421.167:5742): avc: denied { mount } for pid=17267 comm="syz.1.4064" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 290.265255][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.277330][ T40] audit: type=1400 audit(1754275421.167:5743): avc: denied { read } for pid=17267 comm="syz.1.4064" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.285151][ T40] audit: type=1400 audit(1754275421.167:5744): avc: denied { open } for pid=17267 comm="syz.1.4064" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.292341][ T40] audit: type=1400 audit(1754275421.167:5745): avc: denied { lock } for pid=17267 comm="syz.1.4064" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.299601][ T40] audit: type=1400 audit(1754275421.167:5746): avc: denied { setopt } for pid=17267 comm="syz.1.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.306031][ T40] audit: type=1400 audit(1754275421.176:5747): avc: denied { write } for pid=17270 comm="syz.2.4066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 290.311917][ T40] audit: type=1400 audit(1754275421.186:5748): avc: denied { create } for pid=17270 comm="syz.2.4066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.337322][ T40] audit: type=1400 audit(1754275421.260:5749): avc: denied { module_request } for pid=17273 comm="syz.1.4067" kmod="netdev-macvlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 290.371006][T17280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4067'. [ 290.401437][T17284] sg_write: data in/out 262108/251 bytes for SCSI command 0x15-- guessing data in; [ 290.401437][T17284] program syz.4.4070 not setting count and/or reply_len properly [ 290.485774][T17286] kvm: kvm [17285]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x87 [ 290.488709][T17286] kvm: kvm [17285]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x87 [ 290.505050][T17286] kvm: kvm [17285]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x87 [ 290.519243][T17291] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 290.522674][T17291] qnx6: wrong signature (magic) in superblock #1. [ 290.524673][T17291] qnx6: unable to read the first superblock [ 290.525562][T17286] kvm: kvm [17285]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x87 [ 290.529840][T17286] kvm: kvm [17285]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x87 [ 290.544619][T17286] kvm_intel: kvm [17285]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x87 [ 290.557232][T17294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4074'. [ 290.597999][ T5973] Bluetooth: hci3: sending frame failed (-49) [ 290.600486][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 290.634943][T17298] BIDI support in bsg has been removed. [ 290.977216][ T6031] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 291.137553][ T6031] usb 9-1: Using ep0 maxpacket: 8 [ 291.140358][ T6031] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 291.142911][ T6031] usb 9-1: config 0 has no interface number 0 [ 291.144900][ T6031] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 291.148398][ T6031] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 291.151929][ T6031] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 291.155283][ T6031] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 291.159320][ T6031] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 291.162081][ T6031] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.165794][ T6031] usb 9-1: config 0 descriptor?? [ 291.170044][ T6031] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 291.372735][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 291.383234][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.386139][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.389293][ T6031] usb 9-1: USB disconnect, device number 12 [ 291.393008][ T6031] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 291.410663][T17317] tipc: Enabling of bearer rejected, already enabled [ 291.601129][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4087'. [ 292.078333][ T1340] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 292.250634][ T1340] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.254063][ T1340] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 292.257087][ T1340] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 292.259877][ T1340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.264235][T17341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 292.268011][ T1340] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.484545][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.616104][T17349] loop3: detected capacity change from 0 to 8 [ 292.630869][ T10] usb 7-1: USB disconnect, device number 31 [ 292.725464][T17349] Dev loop3: unable to read RDB block 8 [ 292.727294][T17349] loop3: unable to read partition table [ 292.729149][T17349] loop3: partition table beyond EOD, truncated [ 292.730577][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 292.731761][T17349] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CÿjmámÛÀ¿Ã½?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 292.860500][T17355] loop4: detected capacity change from 0 to 7 [ 292.862864][T17355] Dev loop4: unable to read RDB block 7 [ 292.864615][T17355] loop4: unable to read partition table [ 292.866475][T17355] loop4: partition table beyond EOD, truncated [ 292.868434][T17355] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 293.276510][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4100'. [ 293.596393][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 293.842361][ T5973] Bluetooth: hci3: command 0x1003 tx timeout [ 293.844609][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 294.029610][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4105'. [ 294.033361][ T3251] IPVS: starting estimator thread 0... [ 294.035150][T17379] tipc: Enabled bearer , priority 10 [ 294.141707][T17380] IPVS: using max 46 ests per chain, 110400 per kthread [ 294.152364][ T6031] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 294.160009][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4108'. [ 294.191343][T17390] ubi31: detaching mtd0 [ 294.195084][T17390] ubi31: mtd0 is detached [ 294.205789][ T6018] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 294.241087][T17394] 9pnet_fd: Insufficient options for proto=fd [ 294.323356][ T6031] usb 5-1: Using ep0 maxpacket: 8 [ 294.334902][ T6031] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 294.338086][ T6031] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.340874][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.360985][ T5973] Bluetooth: hci3: sending frame failed (-49) [ 294.363441][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 294.377209][ T6018] usb 6-1: Using ep0 maxpacket: 32 [ 294.380004][ T6018] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 294.382731][ T6018] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 294.385401][ T6018] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 294.388866][ T6018] usb 6-1: config 1 has no interface number 0 [ 294.391327][ T6018] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.394747][ T6018] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 294.398771][ T6018] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 294.401685][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.407198][ T6018] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 294.526631][ T1340] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 294.697548][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 294.699807][ T1340] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.704234][ T1340] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 32303, setting to 1024 [ 294.707670][ T1340] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 294.711015][ T1340] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.713916][ T1340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.719078][T17396] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 294.740435][ T6005] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 294.901915][ T6005] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.904639][ T6005] usb 9-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 294.907826][ T6005] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.910646][ T6005] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.916024][ T6005] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.918912][ T6005] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.921491][ T6005] usb 9-1: Product: syz [ 294.922950][ T6005] usb 9-1: Manufacturer: syz [ 294.928069][ T6005] cdc_wdm 9-1:1.0: skipping garbage [ 294.929800][ T6005] cdc_wdm 9-1:1.0: skipping garbage [ 294.931472][ T6005] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 294.996972][T17402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.999706][T17402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.999831][ T6018] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 295.151949][ T6018] usb 9-1: USB disconnect, device number 13 [ 295.223314][ T840] tipc: Node number set to 2555921730 [ 295.437162][ T1340] usb 7-1: string descriptor 0 read error: -71 [ 295.442683][ T1340] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.458347][ T1340] usb 7-1: USB disconnect, device number 32 [ 295.725485][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 295.725496][ T40] audit: type=1400 audit(1754275426.293:5839): avc: denied { write } for pid=17404 comm="syz.4.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.736830][ T40] audit: type=1400 audit(1754275426.302:5840): avc: denied { create } for pid=17404 comm="syz.4.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 295.742849][ T40] audit: type=1400 audit(1754275426.302:5841): avc: denied { read } for pid=17404 comm="syz.4.4114" path="socket:[80691]" dev="sockfs" ino=80691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 295.801596][ T40] audit: type=1326 audit(1754275426.368:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17404 comm="syz.4.4114" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f14b3785b27 code=0x0 [ 295.809495][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.163144][ T1340] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 296.708429][ T40] audit: type=1400 audit(1754275427.219:5843): avc: denied { read write } for pid=17413 comm="syz.4.4116" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 296.715736][ T40] audit: type=1400 audit(1754275427.219:5844): avc: denied { open } for pid=17413 comm="syz.4.4116" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 296.722401][ T40] audit: type=1400 audit(1754275427.219:5845): avc: denied { ioctl } for pid=17413 comm="syz.4.4116" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 296.912900][ T40] audit: type=1400 audit(1754275427.406:5846): avc: denied { unmount } for pid=10965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 296.921163][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.975224][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 297.110923][ T839] usb 5-1: USB disconnect, device number 35 [ 297.137998][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.141539][ T10] usb 9-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 297.145774][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.149578][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.160104][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.163819][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.167356][ T10] usb 9-1: Product: syz [ 297.168773][ T10] usb 9-1: Manufacturer: syz [ 297.172090][ T3251] usb 6-1: USB disconnect, device number 40 [ 297.176559][ T3251] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 297.176618][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 297.180659][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 297.182289][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 297.183942][ T10] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 297.257331][ T40] audit: type=1400 audit(1754275427.724:5847): avc: denied { name_bind } for pid=17433 comm="syz.2.4118" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 297.330002][ T5973] Bluetooth: hci3: sending frame failed (-49) [ 297.332844][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 297.392597][ T3251] usb 9-1: USB disconnect, device number 14 [ 297.437711][ T40] audit: type=1326 audit(1754275427.892:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17460 comm="syz.0.4124" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a41d8eb69 code=0x0 [ 297.511946][T17466] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 297.514259][T17466] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 297.991814][T17475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4129'. [ 297.996269][T17475] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.033042][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 298.242798][T17484] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 298.381588][T17492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4136'. [ 298.386877][T17493] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 298.529639][T17499] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 298.535039][T17499] loop6: detected capacity change from 0 to 2560 [ 298.537708][T17499] buffer_io_error: 3 callbacks suppressed [ 298.537717][T17499] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.542088][T17499] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.544667][T17499] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.547479][T17499] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.550061][T17499] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.552641][T17499] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.555182][T17499] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.558000][T17499] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.560552][T17499] ldm_validate_partition_table(): Disk read failed. [ 298.562623][T17499] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.565061][T17499] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.567710][T17499] Dev loop6: unable to read RDB block 0 [ 298.569814][T17499] loop6: unable to read partition table [ 298.571709][T17499] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 298.653420][ T3251] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 298.776750][T17506] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4141'. [ 298.813491][ T3251] usb 5-1: Using ep0 maxpacket: 8 [ 298.817296][ T3251] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.820391][ T3251] usb 5-1: config 0 has no interface number 0 [ 298.822784][ T3251] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.828394][ T3251] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 298.831739][ T3251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.837280][ T3251] usb 5-1: config 0 descriptor?? [ 298.842977][ T3251] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 299.144823][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 299.804198][T17519] SELinux: policydb string length 14080 does not match expected length 8 [ 299.806868][T17519] SELinux: failed to load policy [ 299.808860][T17519] vivid-000: ================= START STATUS ================= [ 299.811477][T17519] vivid-000: Test Pattern: CSC Colorbar [ 299.813301][T17519] vivid-000: Fill Percentage of Frame: 100 [ 299.816753][T17519] vivid-000: Horizontal Movement: No Movement [ 299.818642][T17519] vivid-000: Vertical Movement: No Movement [ 299.820327][T17519] vivid-000: OSD Text Mode: None [ 299.821726][T17519] vivid-000: Show Border: true [ 299.823083][T17519] vivid-000: Show Square: false [ 299.824483][T17519] vivid-000: Sensor Flipped Horizontally: false [ 299.826252][T17519] vivid-000: Sensor Flipped Vertically: false [ 299.828187][T17519] vivid-000: Insert SAV Code in Image: false [ 299.830168][T17519] vivid-000: Insert EAV Code in Image: false [ 299.832119][T17519] vivid-000: Insert Video Guard Band: false [ 299.833977][T17519] vivid-000: Reduced Framerate: false [ 299.835710][T17519] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 299.838077][T17519] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 299.840754][T17519] vivid-000: Enable Capture Cropping: true [ 299.842565][T17519] vivid-000: Enable Capture Composing: true [ 299.844409][T17519] vivid-000: Enable Capture Scaler: true [ 299.846188][T17519] vivid-000: Timestamp Source: End of Frame [ 299.848087][T17519] vivid-000: Colorspace: Rec. 709 [ 299.849670][T17519] vivid-000: Transfer Function: Default [ 299.851487][T17519] vivid-000: Y'CbCr Encoding: Default [ 299.853164][T17519] vivid-000: HSV Encoding: Hue 0-179 [ 299.854814][T17519] vivid-000: Quantization: Default [ 299.856422][T17519] vivid-000: Apply Alpha To Red Only: false [ 299.858257][T17519] vivid-000: Standard Aspect Ratio: 14x9 [ 299.860059][T17519] vivid-000: DV Timings Signal Mode: Current DV Timings [ 299.862364][T17519] vivid-000: DV Timings: 640x480p59 inactive [ 299.864280][T17519] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 299.866559][T17519] vivid-000: Maximum EDID Blocks: 2 [ 299.868194][T17519] vivid-000: Limited RGB Range (16-235): true [ 299.870084][T17519] vivid-000: Rx RGB Quantization Range: Automatic [ 299.872328][T17519] vivid-000: Power Present: 0x00000001 [ 299.874038][T17519] tpg source WxH: 1280x720 (Y'CbCr) [ 299.875654][T17519] tpg field: 1 [ 299.876754][T17519] tpg crop: (0,0)/1280x64 [ 299.878102][T17519] tpg compose: (0,0)/1280x16 [ 299.879547][T17519] tpg colorspace: 3 [ 299.880764][T17519] tpg transfer function: 0/0 [ 299.882242][T17519] tpg Y'CbCr encoding: 0/0 [ 299.884062][T17519] tpg quantization: 0/0 [ 299.885381][T17519] tpg RGB range: 0/1 [ 299.886697][T17519] vivid-000: ================== END STATUS ================== [ 300.171138][ T1340] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 300.257011][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.334710][ T1340] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.337867][ T1340] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.343318][ T1340] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.346113][ T1340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.348582][ T1340] usb 6-1: Product: syz [ 300.349898][ T1340] usb 6-1: Manufacturer: syz [ 300.351355][ T1340] usb 6-1: SerialNumber: syz [ 300.355600][ T1340] cdc_mbim 6-1:1.0: skipping garbage [ 300.357294][ T1340] usb 6-1: selecting invalid altsetting 1 [ 300.598812][ T5973] Bluetooth: hci3: command 0x1003 tx timeout [ 300.602650][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 300.643972][T17522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.646788][T17522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.658829][T17526] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4147'. [ 300.661702][T17526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4147'. [ 300.816548][T17531] Bluetooth: MGMT ver 1.23 [ 301.154628][ T6005] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 301.315049][ T6005] usb 9-1: Using ep0 maxpacket: 8 [ 301.318267][ T6005] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.320855][ T6005] usb 9-1: config 0 has no interface number 0 [ 301.322837][ T6005] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.326295][ T6005] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 301.329167][ T6005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.333515][ T6005] usb 9-1: config 0 descriptor?? [ 301.337811][ T6005] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 301.368443][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 301.551372][T17534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.554216][T17534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.558283][ T10] usb 9-1: USB disconnect, device number 15 [ 301.587406][ T3251] usb 5-1: USB disconnect, device number 36 [ 301.607907][T17536] tipc: Enabled bearer , priority 0 [ 301.610517][T17536] syzkaller0: entered promiscuous mode [ 301.612352][T17536] syzkaller0: entered allmulticast mode [ 301.623564][T17536] syzkaller0: mtu greater than device maximum [ 301.626733][T17535] tipc: Resetting bearer [ 301.634987][T17535] tipc: Disabling bearer [ 301.827346][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 301.827357][ T40] audit: type=1400 audit(1754275431.999:5914): avc: denied { create } for pid=17542 comm="syz.0.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 301.835713][ T40] audit: type=1400 audit(1754275432.008:5915): avc: denied { create } for pid=17542 comm="syz.0.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 301.841832][ T40] audit: type=1400 audit(1754275432.008:5916): avc: denied { create } for pid=17542 comm="syz.0.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 301.848028][ T40] audit: type=1400 audit(1754275432.008:5917): avc: denied { write } for pid=17542 comm="syz.0.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 301.854225][ T40] audit: type=1400 audit(1754275432.008:5918): avc: denied { nlmsg_write } for pid=17542 comm="syz.0.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 301.872186][ T40] audit: type=1400 audit(1754275432.046:5919): avc: denied { create } for pid=17544 comm="syz.0.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 301.996185][ T40] audit: type=1400 audit(1754275432.158:5920): avc: denied { name_bind } for pid=17550 comm="syz.0.4163" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 302.002487][ T40] audit: type=1400 audit(1754275432.158:5921): avc: denied { node_bind } for pid=17550 comm="syz.0.4163" saddr=::ffff:172.20.20.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 302.009227][ T40] audit: type=1400 audit(1754275432.167:5922): avc: denied { create } for pid=17549 comm="syz.2.4154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.015375][ T40] audit: type=1400 audit(1754275432.167:5923): avc: denied { write } for pid=17549 comm="syz.2.4154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.128000][T17558] sg_read: process 436 (syz.4.4156) changed security contexts after opening file descriptor, this is not allowed. [ 302.146982][ T5973] Bluetooth: hci3: sending frame failed (-49) [ 302.152042][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 302.480268][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 303.346288][ T6005] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 303.349461][ T1340] cdc_mbim 6-1:1.0: bind() failure [ 303.354032][ T1340] usb 6-1: USB disconnect, device number 41 [ 303.444200][ T6018] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 303.512047][ C0] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 303.515234][ C0] sr 2:0:0:0: [sr0] tag#3 CDB: Test Unit Ready [ 303.517300][ T6005] usb 7-1: Using ep0 maxpacket: 16 [ 303.520488][ T6005] usb 7-1: config 0 has no interfaces? [ 303.523016][ T6005] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 303.525889][ T6005] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 303.528555][ T6005] usb 7-1: Manufacturer: syz [ 303.531187][ T6005] usb 7-1: config 0 descriptor?? [ 303.592097][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 303.613518][ T6018] usb 9-1: Using ep0 maxpacket: 8 [ 303.616326][ T6018] usb 9-1: config 0 interface 0 has no altsetting 0 [ 303.618405][ T6018] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 303.621219][ T6018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.624906][ T6018] usb 9-1: config 0 descriptor?? [ 304.059915][ T6018] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 304.275478][ T6018] usb 9-1: USB disconnect, device number 16 [ 304.475902][T17599] netlink: 'syz.1.4173': attribute type 1 has an invalid length. [ 304.703949][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 304.821512][ T3251] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 304.960513][ T3251] usb 6-1: device descriptor read/64, error -71 [ 305.217358][ T3251] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 305.291909][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 305.356066][ T3251] usb 6-1: device descriptor read/64, error -71 [ 305.464132][ T24] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.466891][ T24] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.470038][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.472891][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 305.476712][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 305.481317][ T24] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.484199][ T24] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.484538][ T3251] usb usb6-port1: attempt power cycle [ 305.486919][ T24] usb 9-1: Product: syz [ 305.489732][ T24] usb 9-1: Manufacturer: syz [ 305.493440][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 305.495181][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 305.497478][ T24] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 305.499334][ T24] cdc_wdm 9-1:1.0: Unknown control protocol [ 305.569922][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 305.569968][ T5973] Bluetooth: hci3: command 0x1003 tx timeout [ 305.755401][ T9] usb 9-1: USB disconnect, device number 17 [ 305.815777][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 305.858522][ T3251] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 305.880320][ T3251] usb 6-1: device descriptor read/8, error -71 [ 306.136507][ T3251] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 306.168988][ T3251] usb 6-1: device descriptor read/8, error -71 [ 306.286329][ T3251] usb usb6-port1: unable to enumerate USB device [ 306.313733][ T9] usb 7-1: USB disconnect, device number 33 [ 306.327053][T17627] tmpfs: Bad value for 'mpol' [ 306.692588][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 306.793112][T17649] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 306.796722][T17649] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 306.853576][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 306.856457][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 306.858955][ T9] usb 7-1: config 0 has no interface number 0 [ 306.860876][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 306.864793][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 306.867765][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.871345][ T9] usb 7-1: config 0 descriptor?? [ 306.875039][ T9] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 306.927561][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.017977][T17656] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 307.218697][T17662] team0: Port device team_slave_0 removed [ 307.363343][T17664] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 307.369675][T17664] kvm: Disabled LAPIC found during irq injection [ 307.473785][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 307.473795][ T40] audit: type=1326 audit(1754275437.284:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.0.4200" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a41d8eb69 code=0x0 [ 307.551351][ T40] audit: type=1400 audit(1754275437.359:6011): avc: denied { read } for pid=17668 comm="syz.0.4201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.683409][ T40] audit: type=1400 audit(1754275437.480:6012): avc: denied { mounton } for pid=17671 comm="syz.0.4202" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 307.687614][T17672] syz.0.4202: attempt to access beyond end of device [ 307.687614][T17672] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 307.695764][T17672] XFS (nbd0): SB validate failed with error -5. [ 307.739878][ T40] audit: type=1400 audit(1754275437.527:6013): avc: denied { watch } for pid=17678 comm="syz.0.4203" path="/525/file0" dev="tmpfs" ino=2739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 307.742373][T17679] fuse: Bad value for 'fd' [ 307.771785][ T40] audit: type=1400 audit(1754275437.555:6014): avc: denied { create } for pid=17680 comm="syz.0.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 307.773130][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4204'. [ 307.784929][T17681] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 307.809957][ T40] audit: type=1400 audit(1754275437.592:6015): avc: denied { bind } for pid=17682 comm="syz.0.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.816196][ T40] audit: type=1400 audit(1754275437.592:6016): avc: denied { name_bind } for pid=17682 comm="syz.0.4205" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 307.823494][ T40] audit: type=1400 audit(1754275437.592:6017): avc: denied { node_bind } for pid=17682 comm="syz.0.4205" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 307.923040][ T40] audit: type=1400 audit(1754275437.705:6018): avc: denied { unmount } for pid=11909 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 307.941107][ T40] audit: type=1400 audit(1754275437.714:6019): avc: denied { read write } for pid=17687 comm="syz.1.4207" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 308.039420][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 308.162862][T17698] FAULT_INJECTION: forcing a failure. [ 308.162862][T17698] name failslab, interval 1, probability 0, space 0, times 0 [ 308.167074][T17698] CPU: 0 UID: 0 PID: 17698 Comm: syz.1.4210 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 308.167089][T17698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.167096][T17698] Call Trace: [ 308.167100][T17698] [ 308.167105][T17698] dump_stack_lvl+0x16c/0x1f0 [ 308.167140][T17698] should_fail_ex+0x512/0x640 [ 308.167162][T17698] ? fs_reclaim_acquire+0xae/0x150 [ 308.167178][T17698] ? tomoyo_encode2+0x100/0x3e0 [ 308.167192][T17698] should_failslab+0xc2/0x120 [ 308.167205][T17698] __kmalloc_noprof+0xd2/0x510 [ 308.167219][T17698] tomoyo_encode2+0x100/0x3e0 [ 308.167235][T17698] tomoyo_encode+0x29/0x50 [ 308.167249][T17698] tomoyo_realpath_from_path+0x18f/0x6e0 [ 308.167265][T17698] ? tomoyo_profile+0x47/0x60 [ 308.167283][T17698] tomoyo_path_number_perm+0x245/0x580 [ 308.167294][T17698] ? tomoyo_path_number_perm+0x237/0x580 [ 308.167307][T17698] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.167320][T17698] ? find_held_lock+0x2b/0x80 [ 308.167346][T17698] ? find_held_lock+0x2b/0x80 [ 308.167358][T17698] ? hook_file_ioctl_common+0x145/0x410 [ 308.167378][T17698] ? __fget_files+0x20e/0x3c0 [ 308.167393][T17698] security_file_ioctl+0x9b/0x240 [ 308.167408][T17698] __x64_sys_ioctl+0xb7/0x210 [ 308.167426][T17698] do_syscall_64+0xcd/0x4c0 [ 308.167444][T17698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.167455][T17698] RIP: 0033:0x7fb0c258eb69 [ 308.167464][T17698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.167475][T17698] RSP: 002b:00007fb0c34e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.167486][T17698] RAX: ffffffffffffffda RBX: 00007fb0c27b5fa0 RCX: 00007fb0c258eb69 [ 308.167493][T17698] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000006 [ 308.167499][T17698] RBP: 00007fb0c34e3090 R08: 0000000000000000 R09: 0000000000000000 [ 308.167506][T17698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.167512][T17698] R13: 0000000000000000 R14: 00007fb0c27b5fa0 R15: 00007ffe482e69f8 [ 308.167526][T17698] [ 308.167536][T17698] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.738581][T17706] FAULT_INJECTION: forcing a failure. [ 308.738581][T17706] name failslab, interval 1, probability 0, space 0, times 0 [ 308.742653][T17706] CPU: 2 UID: 0 PID: 17706 Comm: syz.1.4213 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 308.742668][T17706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.742685][T17706] Call Trace: [ 308.742690][T17706] [ 308.742695][T17706] dump_stack_lvl+0x16c/0x1f0 [ 308.742727][T17706] should_fail_ex+0x512/0x640 [ 308.742749][T17706] ? fs_reclaim_acquire+0xae/0x150 [ 308.742765][T17706] ? tomoyo_encode2+0x100/0x3e0 [ 308.742779][T17706] should_failslab+0xc2/0x120 [ 308.742792][T17706] __kmalloc_noprof+0xd2/0x510 [ 308.742803][T17706] ? d_absolute_path+0x136/0x1a0 [ 308.742822][T17706] tomoyo_encode2+0x100/0x3e0 [ 308.742838][T17706] tomoyo_encode+0x29/0x50 [ 308.742851][T17706] tomoyo_realpath_from_path+0x18f/0x6e0 [ 308.742870][T17706] tomoyo_path_number_perm+0x245/0x580 [ 308.742881][T17706] ? tomoyo_path_number_perm+0x237/0x580 [ 308.742894][T17706] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.742905][T17706] ? find_held_lock+0x2b/0x80 [ 308.742934][T17706] ? find_held_lock+0x2b/0x80 [ 308.742946][T17706] ? hook_file_ioctl_common+0x145/0x410 [ 308.742966][T17706] ? __fget_files+0x20e/0x3c0 [ 308.742981][T17706] security_file_ioctl+0x9b/0x240 [ 308.742997][T17706] __x64_sys_ioctl+0xb7/0x210 [ 308.743019][T17706] do_syscall_64+0xcd/0x4c0 [ 308.743037][T17706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.743049][T17706] RIP: 0033:0x7fb0c258eb69 [ 308.743058][T17706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.743069][T17706] RSP: 002b:00007fb0c34e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.743084][T17706] RAX: ffffffffffffffda RBX: 00007fb0c27b5fa0 RCX: 00007fb0c258eb69 [ 308.743091][T17706] RDX: 0000200000000000 RSI: 00000000c008561c RDI: 0000000000000004 [ 308.743098][T17706] RBP: 00007fb0c34e3090 R08: 0000000000000000 R09: 0000000000000000 [ 308.743104][T17706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.743111][T17706] R13: 0000000000000000 R14: 00007fb0c27b5fa0 R15: 00007ffe482e69f8 [ 308.743125][T17706] [ 308.743195][T17706] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.894720][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 308.894724][ T5973] Bluetooth: hci3: command 0x1003 tx timeout [ 308.984608][T17711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4215'. [ 308.987547][T17711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4215'. [ 309.089348][T17723] FAULT_INJECTION: forcing a failure. [ 309.089348][T17723] name failslab, interval 1, probability 0, space 0, times 0 [ 309.089369][T17724] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4219'. [ 309.090740][T17724] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4219'. [ 309.093296][T17723] CPU: 3 UID: 0 PID: 17723 Comm: syz.4.4220 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 309.093312][T17723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.093319][T17723] Call Trace: [ 309.093323][T17723] [ 309.093327][T17723] dump_stack_lvl+0x16c/0x1f0 [ 309.093347][T17723] should_fail_ex+0x512/0x640 [ 309.093365][T17723] ? __kmalloc_noprof+0xbf/0x510 [ 309.093379][T17723] ? nla_strdup+0xc6/0x150 [ 309.093389][T17723] should_failslab+0xc2/0x120 [ 309.093403][T17723] __kmalloc_noprof+0xd2/0x510 [ 309.093417][T17723] nla_strdup+0xc6/0x150 [ 309.093429][T17723] nf_tables_newtable+0xdeb/0x1b40 [ 309.093445][T17723] ? __pfx___nla_validate_parse+0x10/0x10 [ 309.093460][T17723] ? __pfx_nf_tables_newtable+0x10/0x10 [ 309.093476][T17723] ? __nla_parse+0x40/0x60 [ 309.093491][T17723] nfnetlink_rcv_batch+0x18ea/0x2330 [ 309.093512][T17723] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 309.093525][T17723] ? irqentry_exit+0x3b/0x90 [ 309.093550][T17723] ? avc_has_perm_noaudit+0x149/0x3b0 [ 309.093581][T17723] ? __nla_parse+0x40/0x60 [ 309.093595][T17723] nfnetlink_rcv+0x3c1/0x430 [ 309.093608][T17723] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 309.093624][T17723] netlink_unicast+0x5a7/0x870 [ 309.093644][T17723] ? __pfx_netlink_unicast+0x10/0x10 [ 309.093661][T17723] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 309.093682][T17723] netlink_sendmsg+0x8d1/0xdd0 [ 309.093701][T17723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.093724][T17723] ____sys_sendmsg+0xa95/0xc70 [ 309.093737][T17723] ? copy_msghdr_from_user+0x10a/0x160 [ 309.093753][T17723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.093771][T17723] ___sys_sendmsg+0x134/0x1d0 [ 309.093788][T17723] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.093816][T17723] ? __mutex_unlock_slowpath+0x80/0x800 [ 309.093842][T17723] __sys_sendmsg+0x16d/0x220 [ 309.093858][T17723] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.093884][T17723] do_syscall_64+0xcd/0x4c0 [ 309.093902][T17723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.093913][T17723] RIP: 0033:0x7f14b378eb69 [ 309.093923][T17723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.093934][T17723] RSP: 002b:00007f14b469f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.093944][T17723] RAX: ffffffffffffffda RBX: 00007f14b39b5fa0 RCX: 00007f14b378eb69 [ 309.093951][T17723] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 309.093958][T17723] RBP: 00007f14b469f090 R08: 0000000000000000 R09: 0000000000000000 [ 309.093964][T17723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.093971][T17723] R13: 0000000000000000 R14: 00007f14b39b5fa0 R15: 00007ffe555ce9e8 [ 309.093985][T17723] [ 309.152638][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 309.208096][T17731] usb usb9: usbfs: process 17731 (syz.0.4221) did not claim interface 0 before use [ 309.366963][ T5973] Bluetooth: hci3: sending frame failed (-49) [ 309.369738][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 309.542598][ T24] usb 7-1: USB disconnect, device number 34 [ 309.557484][ T6018] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 309.717903][ T6018] usb 6-1: Using ep0 maxpacket: 8 [ 309.722703][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.724832][ T6018] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 309.727630][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.739521][ T6018] usb 6-1: config 0 descriptor?? [ 309.956306][T17741] FAULT_INJECTION: forcing a failure. [ 309.956306][T17741] name failslab, interval 1, probability 0, space 0, times 0 [ 309.960328][T17741] CPU: 3 UID: 0 PID: 17741 Comm: syz.1.4225 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 309.960344][T17741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.960351][T17741] Call Trace: [ 309.960355][T17741] [ 309.960360][T17741] dump_stack_lvl+0x16c/0x1f0 [ 309.960381][T17741] should_fail_ex+0x512/0x640 [ 309.960411][T17741] ? fs_reclaim_acquire+0xae/0x150 [ 309.960427][T17741] ? tomoyo_encode2+0x100/0x3e0 [ 309.960441][T17741] should_failslab+0xc2/0x120 [ 309.960454][T17741] __kmalloc_noprof+0xd2/0x510 [ 309.960466][T17741] ? d_absolute_path+0x136/0x1a0 [ 309.960485][T17741] tomoyo_encode2+0x100/0x3e0 [ 309.960501][T17741] tomoyo_encode+0x29/0x50 [ 309.960514][T17741] tomoyo_realpath_from_path+0x18f/0x6e0 [ 309.960533][T17741] tomoyo_path_number_perm+0x245/0x580 [ 309.960545][T17741] ? tomoyo_path_number_perm+0x237/0x580 [ 309.960558][T17741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 309.960571][T17741] ? lock_acquire+0x179/0x350 [ 309.960602][T17741] ? find_held_lock+0x2b/0x80 [ 309.960615][T17741] ? hook_file_ioctl_common+0x145/0x410 [ 309.960636][T17741] ? __fget_files+0x20e/0x3c0 [ 309.960650][T17741] security_file_ioctl+0x9b/0x240 [ 309.960665][T17741] __x64_sys_ioctl+0xb7/0x210 [ 309.960683][T17741] do_syscall_64+0xcd/0x4c0 [ 309.960701][T17741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.960713][T17741] RIP: 0033:0x7fb0c258e76b [ 309.960722][T17741] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 309.960734][T17741] RSP: 002b:00007fb0c34e0f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.960745][T17741] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb0c258e76b [ 309.960752][T17741] RDX: 00007fb0c34e1fe0 RSI: 0000000041015500 RDI: 0000000000000005 [ 309.960759][T17741] RBP: 00007fb0c34e1fe0 R08: 0000000000000000 R09: 00312e6364755f79 [ 309.960766][T17741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.960773][T17741] R13: 00007fb0c34e0fb0 R14: 0000200000000040 R15: 00007fb0c28e0b88 [ 309.960787][T17741] [ 309.960830][T17741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 310.007273][T17757] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4230'. [ 310.012234][T17741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.036209][T17741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.040246][T17757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4230'. [ 310.040573][ T6018] usbhid 6-1:0.0: can't add hid device: -71 [ 310.046997][ T6018] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 310.058601][ T6018] usb 6-1: USB disconnect, device number 46 [ 310.130620][T17761] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 310.273719][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 310.412878][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 310.504298][ T5973] Bluetooth: hci3: sending frame failed (-49) [ 310.507529][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 310.596820][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 12336, setting to 1024 [ 310.601199][T17773] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.603309][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 310.616023][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.621687][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 310.624541][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.627284][ T9] usb 7-1: Product: syz [ 310.629322][ T9] usb 7-1: Manufacturer: syz [ 310.630813][ T9] usb 7-1: SerialNumber: syz [ 310.633836][T17761] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 310.636704][ T9] hub 7-1:1.0: bad descriptor, ignoring hub [ 310.638675][ T9] hub 7-1:1.0: probe with driver hub failed with error -5 [ 310.663995][T17781] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4239'. [ 310.668535][T17781] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4239'. [ 310.694595][T17779] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 310.701165][T17779] kvm: Disabled LAPIC found during irq injection [ 310.853800][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 310.935644][T17796] syzkaller0: entered promiscuous mode [ 310.937511][T17796] syzkaller0: entered allmulticast mode [ 311.161237][ T6050] usb 7-1: USB disconnect, device number 35 [ 311.165151][ T6050] usblp0: removed [ 311.374857][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 312.155301][ T6018] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 312.326537][ T6018] usb 7-1: Using ep0 maxpacket: 8 [ 312.329342][ T6018] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 312.331900][ T6018] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.334882][ T6018] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.338169][ T6018] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.341271][ T6018] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.345259][ T6018] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.348114][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.486697][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 312.568767][ T6018] usb 7-1: usb_control_msg returned -32 [ 312.570556][ T6018] usbtmc 7-1:16.0: can't read capabilities [ 312.582968][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 312.914354][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 312.914588][ T63] Bluetooth: hci3: command 0x1003 tx timeout [ 312.973917][T17814] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4249'. [ 312.981213][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 312.981224][ T40] audit: type=1400 audit(1754275442.438:6121): avc: denied { create } for pid=17813 comm="syz.1.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.037799][ T40] audit: type=1400 audit(1754275442.485:6122): avc: denied { create } for pid=17819 comm="syz.1.4252" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 313.057781][ T40] audit: type=1400 audit(1754275442.503:6123): avc: denied { map } for pid=17819 comm="syz.1.4252" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 313.065310][ T40] audit: type=1400 audit(1754275442.503:6124): avc: denied { read write } for pid=17819 comm="syz.1.4252" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 313.152713][ T40] audit: type=1400 audit(1754275442.597:6125): avc: denied { getopt } for pid=17822 comm="syz.1.4253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.235053][ T6050] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 313.267111][ T5973] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 313.267145][ T5972] Bluetooth: hci5: command 0x1003 tx timeout [ 313.305943][ T40] audit: type=1400 audit(1754275442.737:6126): avc: denied { create } for pid=17829 comm="syz.1.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 313.312366][ T40] audit: type=1400 audit(1754275442.747:6127): avc: denied { write } for pid=17829 comm="syz.1.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 313.398741][ T40] audit: type=1326 audit(1754275442.831:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17829 comm="syz.1.4255" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0c258eb69 code=0x0 [ 313.407254][ T6050] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 313.410094][ T6050] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 313.413223][ T6050] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 313.415995][ T6050] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 313.419536][ T6050] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 313.424195][ T6050] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 313.426985][ T6050] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 313.429628][ T6050] usb 9-1: Product: syz [ 313.430941][ T6050] usb 9-1: Manufacturer: syz [ 313.434633][ T6050] cdc_wdm 9-1:1.0: skipping garbage [ 313.436296][ T6050] cdc_wdm 9-1:1.0: skipping garbage [ 313.438798][ T6050] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 313.440670][ T6050] cdc_wdm 9-1:1.0: Unknown control protocol [ 313.535956][ T40] audit: type=1326 audit(1754275442.952:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.0.4257" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a41d8eb69 code=0x0 [ 313.609227][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 313.644853][ T40] audit: type=1400 audit(1754275443.055:6130): avc: denied { name_bind } for pid=17831 comm="syz.0.4257" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 313.650373][T17816] __nla_validate_parse: 1 callbacks suppressed [ 313.650382][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 313.656166][T17816] bond0: option use_carrier: invalid value (254) [ 313.659473][ T6050] usb 9-1: USB disconnect, device number 18 [ 314.289771][T17844] [ 314.290580][T17844] ====================================================== [ 314.292738][T17844] WARNING: possible circular locking dependency detected [ 314.294863][T17844] 6.16.0-syzkaller-11322-g352af6a011d5 #0 Not tainted [ 314.297536][T17844] ------------------------------------------------------ [ 314.300528][T17844] syz.1.4259/17844 is trying to acquire lock: [ 314.302403][T17844] ffff888032000068 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1a90 [ 314.305205][T17844] [ 314.305205][T17844] but task is already holding lock: [ 314.307427][T17844] ffff88802ad99140 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 314.310408][T17844] [ 314.310408][T17844] which lock already depends on the new lock. [ 314.310408][T17844] [ 314.313578][T17844] [ 314.313578][T17844] the existing dependency chain (in reverse order) is: [ 314.316332][T17844] [ 314.316332][T17844] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 314.318692][T17844] __mutex_lock+0x193/0x10b0 [ 314.320306][T17844] autofs_notify_daemon+0x4a6/0xd60 [ 314.322051][T17844] autofs_wait+0x10ca/0x1a70 [ 314.323632][T17844] autofs_mount_wait+0x132/0x380 [ 314.325332][T17844] autofs_d_automount+0x390/0x7f0 [ 314.327038][T17844] __traverse_mounts+0x192/0x790 [ 314.328753][T17844] step_into+0x5aa/0x2270 [ 314.330297][T17844] walk_component+0xfc/0x5b0 [ 314.331896][T17844] path_lookupat+0x142/0x6d0 [ 314.333482][T17844] filename_lookup+0x224/0x5f0 [ 314.335115][T17844] kern_path+0x35/0x50 [ 314.336570][T17844] lookup_bdev+0xd8/0x280 [ 314.338081][T17844] resume_store+0x1d6/0x460 [ 314.339639][T17844] kobj_attr_store+0x55/0x80 [ 314.341244][T17844] sysfs_kf_write+0xf2/0x150 [ 314.342813][T17844] kernfs_fop_write_iter+0x354/0x510 [ 314.344623][T17844] iter_file_splice_write+0x91c/0x1150 [ 314.346469][T17844] direct_splice_actor+0x192/0x6c0 [ 314.348265][T17844] splice_direct_to_actor+0x342/0xa30 [ 314.350087][T17844] do_splice_direct+0x174/0x240 [ 314.351739][T17844] do_sendfile+0xb06/0xe50 [ 314.353300][T17844] __x64_sys_sendfile64+0x1d8/0x220 [ 314.355062][T17844] do_syscall_64+0xcd/0x4c0 [ 314.356644][T17844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.358604][T17844] [ 314.358604][T17844] -> #1 (&of->mutex){+.+.}-{4:4}: [ 314.360837][T17844] __mutex_lock+0x193/0x10b0 [ 314.362423][T17844] kernfs_fop_write_iter+0x28f/0x510 [ 314.364236][T17844] iter_file_splice_write+0x91c/0x1150 [ 314.366072][T17844] do_splice+0x1475/0x1fc0 [ 314.367631][T17844] __do_splice+0x32a/0x360 [ 314.369199][T17844] __x64_sys_splice+0x187/0x250 [ 314.370851][T17844] do_syscall_64+0xcd/0x4c0 [ 314.372456][T17844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.374466][T17844] [ 314.374466][T17844] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 314.376747][T17844] __lock_acquire+0x12a6/0x1ce0 [ 314.378405][T17844] lock_acquire+0x179/0x350 [ 314.379983][T17844] __mutex_lock+0x193/0x10b0 [ 314.381567][T17844] anon_pipe_write+0x15d/0x1a90 [ 314.383224][T17844] __kernel_write_iter+0x71d/0xa90 [ 314.384976][T17844] __kernel_write+0xf5/0x140 [ 314.386555][T17844] autofs_notify_daemon+0x4db/0xd60 [ 314.388337][T17844] autofs_wait+0x10ca/0x1a70 [ 314.389925][T17844] autofs_mount_wait+0x132/0x380 [ 314.391600][T17844] autofs_d_automount+0x390/0x7f0 [ 314.393326][T17844] __traverse_mounts+0x192/0x790 [ 314.395107][T17844] step_into+0x5aa/0x2270 [ 314.396645][T17844] walk_component+0xfc/0x5b0 [ 314.398225][T17844] path_lookupat+0x142/0x6d0 [ 314.399827][T17844] filename_lookup+0x224/0x5f0 [ 314.401851][T17844] user_path_at+0x3a/0x60 [ 314.403387][T17844] __x64_sys_mount+0x1fc/0x310 [ 314.405050][T17844] do_syscall_64+0xcd/0x4c0 [ 314.406610][T17844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.408593][T17844] [ 314.408593][T17844] other info that might help us debug this: [ 314.408593][T17844] [ 314.411697][T17844] Chain exists of: [ 314.411697][T17844] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 314.411697][T17844] [ 314.415466][T17844] Possible unsafe locking scenario: [ 314.415466][T17844] [ 314.417758][T17844] CPU0 CPU1 [ 314.419408][T17844] ---- ---- [ 314.421073][T17844] lock(&sbi->pipe_mutex); [ 314.422484][T17844] lock(&of->mutex); [ 314.424502][T17844] lock(&sbi->pipe_mutex); [ 314.426668][T17844] lock(&pipe->mutex); [ 314.427990][T17844] [ 314.427990][T17844] *** DEADLOCK *** [ 314.427990][T17844] [ 314.430467][T17844] 1 lock held by syz.1.4259/17844: [ 314.432075][T17844] #0: ffff88802ad99140 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 314.435175][T17844] [ 314.435175][T17844] stack backtrace: [ 314.437021][T17844] CPU: 3 UID: 0 PID: 17844 Comm: syz.1.4259 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 314.437035][T17844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 314.437043][T17844] Call Trace: [ 314.437047][T17844] [ 314.437052][T17844] dump_stack_lvl+0x116/0x1f0 [ 314.437069][T17844] print_circular_bug+0x275/0x350 [ 314.437087][T17844] check_noncircular+0x14c/0x170 [ 314.437106][T17844] __lock_acquire+0x12a6/0x1ce0 [ 314.437126][T17844] lock_acquire+0x179/0x350 [ 314.437143][T17844] ? anon_pipe_write+0x15d/0x1a90 [ 314.437156][T17844] ? __pfx___might_resched+0x10/0x10 [ 314.437172][T17844] ? anon_pipe_write+0x15d/0x1a90 [ 314.437184][T17844] __mutex_lock+0x193/0x10b0 [ 314.437200][T17844] ? anon_pipe_write+0x15d/0x1a90 [ 314.437214][T17844] ? __pfx___mutex_lock+0x10/0x10 [ 314.437234][T17844] ? rcu_is_watching+0x12/0xc0 [ 314.437247][T17844] ? __bfs+0x148/0x290 [ 314.437261][T17844] ? __bfs+0x148/0x290 [ 314.437275][T17844] ? anon_pipe_write+0x15d/0x1a90 [ 314.437286][T17844] anon_pipe_write+0x15d/0x1a90 [ 314.437299][T17844] ? register_lock_class+0x41/0x4c0 [ 314.437317][T17844] ? __pfx_anon_pipe_write+0x10/0x10 [ 314.437333][T17844] ? __pfx_anon_pipe_write+0x10/0x10 [ 314.437346][T17844] __kernel_write_iter+0x71d/0xa90 [ 314.437358][T17844] ? __pfx___kernel_write_iter+0x10/0x10 [ 314.437369][T17844] ? rcu_is_watching+0x12/0xc0 [ 314.437382][T17844] ? autofs_notify_daemon+0x45a/0xd60 [ 314.437396][T17844] __kernel_write+0xf5/0x140 [ 314.437405][T17844] ? __pfx___kernel_write+0x10/0x10 [ 314.437416][T17844] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.437435][T17844] autofs_notify_daemon+0x4db/0xd60 [ 314.437447][T17844] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 314.437465][T17844] ? lockdep_init_map_type+0x5c/0x280 [ 314.437481][T17844] ? lockdep_init_map_type+0x5c/0x280 [ 314.437499][T17844] autofs_wait+0x10ca/0x1a70 [ 314.437511][T17844] ? __pfx_autofs_wait+0x10/0x10 [ 314.437522][T17844] ? __pfx_path_check_mount+0x10/0x10 [ 314.437536][T17844] ? find_held_lock+0x2b/0x80 [ 314.437548][T17844] ? path_has_submounts+0xcb/0x120 [ 314.437564][T17844] ? do_raw_spin_unlock+0x172/0x230 [ 314.437576][T17844] ? find_held_lock+0x2b/0x80 [ 314.437589][T17844] autofs_mount_wait+0x132/0x380 [ 314.437600][T17844] autofs_d_automount+0x390/0x7f0 [ 314.437612][T17844] __traverse_mounts+0x192/0x790 [ 314.437628][T17844] step_into+0x5aa/0x2270 [ 314.437638][T17844] ? __pfx_step_into+0x10/0x10 [ 314.437654][T17844] ? __pfx___up_read+0x10/0x10 [ 314.437664][T17844] ? walk_component+0x35e/0x5b0 [ 314.437674][T17844] ? lookup_fast+0x156/0x610 [ 314.437684][T17844] walk_component+0xfc/0x5b0 [ 314.437695][T17844] path_lookupat+0x142/0x6d0 [ 314.437707][T17844] filename_lookup+0x224/0x5f0 [ 314.437719][T17844] ? __pfx_filename_lookup+0x10/0x10 [ 314.437738][T17844] ? getname_flags.part.0+0x1c5/0x550 [ 314.437755][T17844] user_path_at+0x3a/0x60 [ 314.437767][T17844] __x64_sys_mount+0x1fc/0x310 [ 314.437782][T17844] ? __pfx___x64_sys_mount+0x10/0x10 [ 314.437797][T17844] do_syscall_64+0xcd/0x4c0 [ 314.437813][T17844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.437824][T17844] RIP: 0033:0x7fb0c258eb69 [ 314.437834][T17844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.437845][T17844] RSP: 002b:00007fb0c34c2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.437856][T17844] RAX: ffffffffffffffda RBX: 00007fb0c27b6080 RCX: 00007fb0c258eb69 [ 314.437863][T17844] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 314.437869][T17844] RBP: 00007fb0c2611df1 R08: 0000000000000000 R09: 0000000000000000 [ 314.437876][T17844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.437883][T17844] R13: 0000000000000000 R14: 00007fb0c27b6080 R15: 00007ffe482e69f8 [ 314.437894][T17844] [ 314.721046][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 315.123912][ T839] usb 7-1: USB disconnect, device number 36 [ 315.822138][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 316.934155][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 318.046205][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 319.157654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 320.269501][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 321.381325][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 322.493084][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 323.615591][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 02:44:20 Registers: info registers vcpu 0 CPU#0 RAX=00000000004177ec RBX=0000000000000000 RCX=ffffffff8b9273a9 RDX=ffffed100d486656 RSI=ffffffff8c15fb00 RDI=ffffffff81913191 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90aad390 R15=0000000000000000 RIP=ffffffff8b925f0f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66c8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c41d9fb CR3=0000000064435000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe482e6d80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe482e6f06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe482e6f06 00007ffe482e6f0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612e0a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612e17 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612e11 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612e25 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612eab ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612f89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000003b1bc4 RBX=0000000000000001 RCX=ffffffff8b9273a9 RDX=ffffed100d4a6656 RSI=ffffffff8c15fb00 RDI=ffffffff81913191 RBP=ffffed1003bd7488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deba440 R14=ffffffff90aad390 R15=0000000000000000 RIP=ffffffff8b925f0f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67c8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000050 CR3=000000002f371000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558cec3370 000055558cec32e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558cecb3c4 000055558cecb3c0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558ced3f9f 000055558ced37b0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558cec3004 000055558cec3000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800000300100005 b98208000100000a 0806060c1e980010 0005b88208000100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300040886c5bac6 08000100000c0806 06011dc402100010 03000800080302fc ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80c5ba9208000100 000c080606011fb2 4b564d0100000000 0000000118080b80 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004028003028004 03a0030008000390 030fffffffffffff 040380030b800408 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0140a08088100003 8004010000000806 06015c960280a008 0003e00300100003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d00300100003c003 02100003b0032810 0002900300040001 a40300020001a203 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08020001a00304dd feeffe0800019803 0785f4ca08000190 03020400018c0300 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000060406018803 2808000180030180 0402800302800403 a003000800039003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003e4f94 RBX=0000000000000002 RCX=ffffffff8b9273a9 RDX=ffffed100d4c6656 RSI=ffffffff8c15fb00 RDI=ffffffff81913191 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90aad390 R15=0000000000000000 RIP=ffffffff8b925f0f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68c8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c41e823 CR3=0000000025614000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85634195 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90004c7eaf8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9b112060 R15=ffffffff85634130 RIP=ffffffff856341bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb0c34c26c0 ffffffff 00c00000 GS =0000 ffff8880d69c8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000000c0 CR3=000000002fa1f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe482e6b20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe482e6f06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe482e6f06 00007ffe482e6f0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612e0a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612e17 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612e11 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612e25 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612eab ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c2612f89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000